change token storage from localStorage to SessionCookie storage