Tokens and sessions
Token lifetimes, refresh tokens, and how a session is represented
Covers how long each token type lives, when your app should use a refresh token instead of sending the user back through login, and how a browser session relates to the tokens behind it.