I mean, it needs at least a session cookie to keep track of your login, right?