Access Token & Refresh Token
Cookie / Session / Token
CORS