Rajiv Tirumalareddy

This looks thorough. I can't think of anything else. I did mention in #20 my one concern with a hacker potentially spoofing the refreshing of the token. Although that seems...

Yeah if we do a refresh interval shorter than the expire interval, it should work. The frontend code will need to "forget" (delete from localStorage) the token on logout though....

+1 to this! @ggreer can we get this merged please?

@epeli I think this is a great idea. I'm going to look into how we can do this in an extensible way and report back here.

I believe #87 will fix this.

As we put more logic into createStore, we should consider #36 to move createStore and BaseStore into their own repo.