Opaque JWT returned from login