Ask HN: What's the current sentiment on JWT for stateless auth tokens?