Post

I'm not a fan of how everything is a `user_token` in the Phoenix auth generator. It's a very leaky abstraction. Why would I need `sent_to` in my session tokens? Imagine needing to add more metadata (IP, Browser, Etc) to sessions now. Almost always you have to separate them.