Move tokens from window global variable to localstorage (anonymous, student) and sessionstorage (admin).  Still have token expiry logic to implement.