The wristband carries its own proof. That's a JWT. Instead of the server storing a session and handing you a meaningless ticket number, the server packages your info (your user ID, your role, an ...
A common approach is to fetch all posts, then fetch each post's author. This results in many database queries. If you have 100 posts, this code makes 101 database queries. This is the "N+1 query ...