I am just storing ephemeral id and username in JWT and put the encrypted id in a separate cookie.