What is the difference between JWT and session/database in next-auth - Theo's Typesafe Cult