Refactor JWT storage from localStorage to HTTPOnly Cookies

[williamtnguyen]

localStorage is the browser's memory, and storing our JSON Web Tokens in there makes our app vulnerable to XSS and CSRF attacks. We should refactor the storage of our JWTs to HTTPOnly cookies to ensure safer authorization within our application

Useful links:

• https://medium.com/@ryanchenkie_40935/react-authentication-how-to-store-jwt-in-a-cookie-346519310e81
• "Writing a custom extractor function": http://www.passportjs.org/packages/passport-jwt/