Unsigned JWT: sign server-side for production use.
JWT tokens are processed client-side. No data is sent to any server.