so when I register, it automatically stores the cookie and anti-csrf

POST {{base_url}}/adminRegister
Content-Type: application/json

{
  "username": "admin1",
  "email": "admin1@email.com",
  "password": "password",
  "passwordConfirmation": "password",
  "userType": "admin"
}

> {%
 client.global.set('cookie', response.body.secureRoutes.cookie)
 client.global.set('anti-csrf', response.body.secureRoutes['anti-csrf'])
 client.global.set('refresh', response.body.refresh.cookie)
 %}