I am trying to implement Jon McGuire\'s excellent OpenID API Token Refresh solution and he left the last part to update the cookie as a tease. His suggestion is to set up a