I think they do the same thing, and I saw `$window.sessionStorage` used a lot in blog posts about token-based authentication, but we can look into better ways. There may be a problem with not all browsers having session storage capabilities, so definitely something to keep in the back of our minds.