Store token in a cookie and allow updating