Comment by francescolaffi

you should have a look at JSON Web Token http://jwt.io/