From a security point of view, the benefits of cookies are that your script cannot read the value of the cookie. Sure, malicious code could make requests throug

From a security point of view, the benefits of cookies are that your script cannot read the value of the cookie. Sure, malicious code could make requests through the browser, but they won't be able to retrieve the access token which would be a bigger compromise.