Secured by SpaceHub Identity
Tokens are held server-side in httpOnly cookies — never in your browser's storage.