JWT token vs Server Tokens