GETs changing/setting cookies is normal, not generally considered as a part of State in REST.

(Should still be styled as a button, however.)