JWT or Not: Personally Insecure Reflections on Software (In)Security [video]