Use httpOnly cookies for authentication

[anjula-sack]

Purpose

The purpose of this PR is to fix #60 and fix #61

Goals

To improve security by using httpOnly cookies

Approach

• Update the auth to use httpOnly cookies
• Add the logout endpoint

Screenshots

Checklist

• This PR doesn't commit any keys, passwords, tokens, usernames, or other secrets.
• I have read and understood the development best practices guidelines ( http://bit.ly/sef-best-practices )
• My code follows the style guidelines of this project
• I have performed a self-review of my own code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation

[Piumal1999]

Good job! Thank you @anjula-sack