Thanks for the comment! At the moment we are focusing on frontend and mobile so we have to be able to access the authentication tokens from the javascript. Howe

Thanks for the comment! At the moment we are focusing on frontend and mobile so we have to be able to access the authentication tokens from the javascript. However, localStorage is an option we are currently exploring to use instead of cookies. For mobile we agree that they have their filesystem to store the tokens securely.