At the moment it saves tokens to a file so that a session can survive a container restart. It's saving them to auth/ but only data/ is mounted in the prod runtime containers.