Capture token

Stored in this browser only, and sent as a bearer token on every request.