Using a cookie is not a benefit, it's a downside. You have to deal with CSRFs, which aren't possible with localStorage.