Added expires and scope to auth cookies
Added ground-work for token refreshing
Some work on avatar display
Don't need token on connect()
Some style ideas for discussion activity
Re-laying out the messages