JWT/Cookie authentication for Pyramid