Most Secure Way to Store Auth Tokens Where should your auth token live so an XSS bug can't steal it? Here's how to build auth that survives the…