Ditch custom superagent and instead handle JWT tokens in a way which
works cross-node & browser superagents.