public cookies, however they aren't set inside ws endpoint