Api now passes cookie on POST as well as GET