so anyway to cut to the chase, this is Really Bad(tm) because if you use a public computer and forget to use Incognito Mode (such as a computer at your school for example), somebody else can come along and snoop that OAuth token straight out of localStorage. and, you know, use it to do anything they want with your account.