Send auth token to strapi through a cookie

[JadeMaveric]

We're reading the cookie locally and sending the token via a header. This exposes the cookie to client side js, making it susceptible to XSS attacks. While the code base takes care to escape all client input, minimising the risk. Sending the auth token via cookies is a much safer option.

Documentation on how to do this with strapi is lacking, so this'll need some digging into their source code.