A better approach to secure web api

JWT: http://www.ruanyifeng.com/blog/2018/07/json_web_token-tutorial.html