Restful service with cookies