In a web app we are quite strict regarding authorization and require session cookies to be sent when us