[F] store plaintext token at cookie

...for the moment. next will build a simple local db.