like i get how if you use JWTs everywhere you avoid hitting the db for authentication but how big of a deal exactly that