Don't use HTTP only cookies.
Send data as like a browser form.