Comment by schwap

Because then you have all the headaches of JWT, without any of the benefits of stateless auth tokens.