jwt vs cookies in next-auth - Theo's Typesafe Cult