Save token to localStorage

Save token to localStorage as well as $cookieStore to support sites running in local filesystems with no cookie support (e.g. inside cordova apps).
True, but we could code defensively to make sure we always return `undefined`. It's a small addition =)