Don't use JSON web tokens for sessions
This articles doesn't acknowledge where JWTs really shine:  Authentication across a cloud of services, esp. a microservice architecture.  JWTs allow a session to be shared across all of the services without any shared state.