Get rid of JWT

[hypergonial]

JWT tokens are designed to be stateless, therefore they cannot easily be revoked. Using a token already results in DB queries, so JWT's advantages are diminished. A conventional stateful token is probably better here, and cuts down on dependencies.