https://medium.com/@kanhaaggarwal/why-your-spring-security-jwt-implementation-is-probably-insecure-and-how-to-fix-it-f9de7c6af559
