If I can turn off Ghost from sending its own session tokens then we may be good (although this may make things slow since Ghost will have to ask Parse server if site sessionToken is valid upon every request).
Or, if we limit Ghost session tokens to maybe an hour, I'd say that is a good compromise.
If I can turn off Ghost from sending its own session tokens then we may be good (although this may make things slow since Ghost will have to ask Parse server if site sessionToken is valid upon every request).
Or, if we limit Ghost session tokens to maybe an hour, I'd say that is a good compromise.