Refactored HTTPSevice to automatically retry requests if re-authorization succeeds.
Removed refresh_token since it provides no security improvements, increased access_token duration.
Migrated from cookies to local storage to avoid sending security tokens even for loading images and fonts.