Hey guys, where should I set the

graphcool-auth-token

after signing in a user?. Is is safe enough to just store it in their localStorage, and remove it when the user logs out manually?