Split Tokens: Token-Based Authentication Protocols Without Side-Channels – https://paragonie.com/blog/2017/02/split-tokens-token-based-authentication-protocols-without-side-channels