Support for local and session based HTML5 storage of OAuth2 access/refresh state