Comment by MuffinFlavored

In that same mindset, why not just do a JWT in a cookie then?