Support for storing refresh token in a cookie.

[jwag956]

This is best practice (and the default) when the application is browser based - an httponly cookie.

Updated some docs that were missing some freshness and open redirect endpoint descriptions.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.02%. Comparing base (6498873) to head (c644f68).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1230      +/-   ##
==========================================
+ Coverage   98.01%   98.02%   +0.01%     
==========================================
  Files          43       43              
  Lines        5381     5415      +34     
==========================================
+ Hits         5274     5308      +34     
  Misses        107      107              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.