Feature Request: changre refresh token to localstorage

[rosibaj]

The refresh token for the workflow-ui is being used as a cookie. This is not necessary, and has some security implications.

Change the workflow-ui implementation to user the Refresh token in localstorage, rather than as a cookie.

[joneubank]

localstorage is insecure, we are in the process of updating token management for access/refresh tokens across our applications. will leave this ticket open for now as a reminder to review our token management on the ui.