Save token to localStorage

Save token to localStorage as well as $cookieStore to support sites running in local filesystems with no cookie support (e.g. inside cordova apps).
I think it's alright to determine what gets returned on the expectation of what we check on `L208`, instead of having one check cover the return of two third-party things. Either is good though, as long as third-party changes won't make it fall over.