im passing the header with cookies to backend and its doing a verification