handshake API

Session Cookie by default