Thanks Ak1T4. :)
The mitigation for this vulnerability is to have some strong encryption rather than weak base64 encoding. Send a encrypted token bind it with the particular user and that’s it.