SPAs were a mistake
You're viewing a single thread.
Get the token from the cookie instead of the Authorization header
