[theacodes]

Because JWT is well specified and supported and it's useful in our case for proxy users to be able to inspect the token.