2016-06-13 UTC
# 
aaronpk some good information here about JWT and sessions, which applies also to access tokens I assume since access tokens are basically session cookies http://cryto.net/~joepie91/blog/2016/06/13/stop-using-jwt-for-sessions/