Yes ZedToken seems to be the only way, we wanted to avoid that as just to save that we have to run a redis instance.