Auth working against localstorage (does this open up auth spoofing?)

Login and out seems to work reliably now without waiting for a response from server