You dont need jwt so that you can authenticate API or Mobile app. people were doing exactly that long before JWT was invented.