Hi! When using the Javascript Supabase package with

persistSession: true

, it stores the session in localStorage which isn't great security wise. While I'm not sure it's 100% safe I thought it would be better to instead store the refresh-token in a cookie and use this to persist the session? Is it possible to authenticate with a refresh token? Does anybody know other/better ways to securely persist session? All advice and related resources are appreciated:)