Strip tokens from response, as the cookie is all that is required for auth on client-side (prevent exposing the refresh token).
Strip tokens from response, as the cookie is all that is required for auth on client-side (prevent exposing the refresh token).

blinkboxbooks/server-web-app.js,blinkboxbooks/server-web-app.js,iQuarK/server-web-app.js,iQuarK/server-web-app.js