configuration option whether to store access token in a cookie

Prefer double-quoted strings unless you need single quotes to avoid extra backslashes for escaping.