Amazing, works like a charm, at least for browser based clients, thank you.

Still wondering what the best practice is for actual iOS apps. Is it really the keychain?