sessions added, refresh token moved to cookie

internal/shared/auth.go

@@ -1,6 +1,8 @@
 package shared
 
+import "net/http"
+
 type AuthData struct {
-	AccessToken  string `json:"access_token"`
-	RefreshToken string `json:"refresh_token"`
+	AccessToken   string
+	RefreshCookie *http.Cookie
 }