use the jwt token as much as possible, use http get when it makes sense.