Session Token

FirstBank signs session JWTs with a weak secret. Crack it, forge a new token with role: admin.