[DiThi]

> Works for users that block cookies: you can very well put your session token in the LocalStorage and achieve the same effect

AFAIK LocalStorage is disabled when cookies are disabled.