JWTs vs. Sessions: Lessons from Building a Real-World Auth Kit in NestJS | Not Hacker News!