JWT Security Cheat Sheet: JSON Web Tokens Explained