Pre-flight checklist
Problem to solve
Read #31 before this.
JWT is currently being stored in local storage.
Proposed solution or API
Use HttpOnly cookie for JWT.
Then modify client code that relies on JWT to get user data.
Alternatives considered
No response
Additional context
No response