AF Cookie should be reused within the context of same request.

Also adding some more functional tests for af.
Should be fine. You'll always call GetCookieToken first, correct? And then only call SaveCookieToken if GetCookieToken returned null?