Tokens (using express-jwt) now work