use the new token strategy in auth.php
use the new token strategy in auth.php

this is functionally equivalent because io strategy does the same thing but
will allow it to be swapped out with a cookie strategy once the javascript has
been adjusted accordingly, also allows for easy testing of new cookie strategy

jmorse/cyanide,jmorse/cyanide,jmorse/cyanide,jmorse/cyanide