jwt與token 取代session作為登入驗證

https://yami.io/jwt/
https://github.com/twtrubiks/django_jwt_tutorial