Don't store user token in cookie.