Consider not storing sensitive information on LocalStorage if the tradeoff pays off

[lealceldeiro]

Describe the bug
Sensitive information stored in the local-storage can be stolen by using an XSS attack

To Reproduce

• Follow attack demos in the linked source

Expected behavior
Do not store sensitive information such as username, security tokens, etc, in local storage.

Instead it can be used:

• Cookies and use the HTTPOnly and Secure flags
• Session storage

Additional context
Consider modifying some of the classes involved in the front-end in storing this kind of sensitive information. i.e.:

• SessionService

[lealceldeiro]

A good source of other references link is https://stackoverflow.com/a/35347022/5640649