Use session cookie via WS to auth