fixes #1 - switch to use sessionStorage instead of localStorage for storing authToken, so authentication data is cleared when the browser is closed