Use cookie for authentication token so it can persist past end of browser session.