Client: requests over cookies