rest

As the cookie work out-of-the-box in the browser, we can use it for rest request also almost out-of-the-box (use 'withCredentials: true' headerOption in a request, do not forget to enable 'supportsCredentials: true' in services.yml alongside other CORS config).