2020
https://scotch.io/tutorials/jwt-vs-opaque-access-tokens-use-both-with-spring-boot#toc-configure-spring-security-to-validate-jwts-and-opaque-tokens
    https://github.com/oktadeveloper/okta-spring-jwt-and-opaque-token-example