Not here actually. At least not with the current implementation. If you don't provide credentials then we generate a cookie for you and attach it with the response.