http://cryto.net/~joepie91/blog/2016/06/13/stop-using-jwt-fo...
http://cryto.net/%7Ejoepie91/blog/2016/06/19/stop-using-jwt-...