Provide SSL certificate for EC2 instance

[MilesDowe]

This should be done in general, but by providing a JWT through a cookie with the secure flag, this is required.

[hasit]

Cookies are no longer required if we use JWT. JWT is the new standard for token based sessions.

[MilesDowe]

How is the JWT stored client side? My understanding is that we can use cookies or sessionStorage, but sessionStorage would require JavaScript code (and preferably a maintainable framework).