Challenge identifier is not in JWT anymore
Sessions are not refreshed anymore
Cleaner session creation