Why would one use JWTs over .NET's own stateless session cookies/encrypted cookies? - C#