Generalizing grant

Refrain from implication that a grant needs an email address as identifying key.

Additional configuration to add secure cookies and HttpOnly

Merge pull request #1 from bosssauce/cleanup

cleanup errors, move setToken to be method, add cookie configs

Initial release

0.1.0

fix merge conflict left behind