JWT tokens stored in local storage

[rafaelpoveronferreira]

It's a bad practice and a major security flaw. A commit storing JWT token as httpOnly cookies or even implementing server sessions should be considered by those using this tutorial.