Sessions, Cookies, and JWTs: How I Stopped Confusing Authentication With Identity

I spent an embarrassing amount of time thinking authentication was just "checking if the password is correct." It is not. Checking the password is one moment. Authentication is the ongoing question: h