I don't understand why so many tutorials still use "dgrijalva" package. It's not maintained, has security issues reported on the list for years, it's not fully RFC compliant and so on.