Knock knock, who's there? Authenticating your single page apps using JSON Web Tokens by Sam Bellen