See the response headers. Does it have set-cookies...
# support-questions-legacy
r
See the response headers. Does it have set-cookies? Does it have an anti-csrf header?