Moved from jwt-token to gorilla-securecookie for AuthMiddleware.