in the response from that API, are you getting set...
# general
r
in the response from that API, are you getting set-cookie headers?