they won't be very advanced though - only user ID signed. frontend will continue to simply ask backend who the token belongs to. however i will use it in future microservices.