session storage for token + check with modernizr