feat: enhance security by implementing HttpOnly refresh tokens and in-memory access token management

- Added isomorphic-dompurify for improved XSS protection
- Refactored token storage to use in-memory management for access tokens
- Implemented server-side route handlers for OAuth token management
- Introduced security headers in next.config.js
- Removed client-side exposure of client_secret and sensitive tokens
- Updated API interceptors to handle token refresh logic
- Cleaned up cookie management for refresh tokens

app/component/date/dateTime/SendAppo.js

@@ -4,7 +4,7 @@ import Cookies from "js-cookie";
 
 function SendAppo({ hour, setStep, setSelectedSlot, date, setSelectedDate }) {
   const sendReq = () => {
-    const isLogged = Cookies.get("access_token");
+    const isLogged = Cookies.get("userInfo");
 
     // ذخیره کردن اطلاعات اسلات انتخاب شده
     if (hour && date) {