Support for storing refresh token in a cookie. (#1230)