# Cookie-based auth vs. Token-based auth