More a generic question as I have read a fair bit and I\'m not sure what is best practice. I have a Rails 6 API as my backend for a project. I have used JWT for authenticati