D developer.okta.com Why JWTs Suck as Session Tokens (2017) 91 points powvans 4 years ago 84 comments