I made a React app (using MERNG stack) with login and logout Authentication; The login set a jwt accessToken in a httpOnly cookie with a POST request handled by express and all