fixed #50: Added basic cookie storage for token + token type to avoid continual re-auth