Support localStorage fallback when cookies fail

Addresses issue #251.  Every authenticated full-frame page load should
attempt to set localStorage with the auth status (or clear it if
unauthenticated).  Scripts expected to load in iframes check for
localStorage if cookie-derived auth is not present.