Switching from cookie to header for the session token.