If there is an expiration in the JWT, logging off is still an issue. You can't log out until the JWT expires.