pub const SESSION_TOKEN_PREFIX: &str = "r:";Expand description
Upstream’s revocable-session prefix (RestWrite.js:1111).
Load-bearing rather than decorative: middlewares.js routes a token without it to the
legacy resolver, which looks the token up on _User instead of _Session. A token minted
without the prefix is therefore not a session token at all.