Encoded JWT token. This will only be returned when cookie-based authentication is disabled in favor of standard Auth header based authentication.