JSON Web Tokens for flasky/session-like goodness