Have you read this post: https://supertokens.io/blog/are-you-using-jwts-for-user-sessions-in-the-cor...