Seriously, who is responsible for "none" JWT tokens. It has caused so many critical security bugs over the years.