Mixing browser-managed cookie semantics with application-defined credential semantics in the Authorization header

91d72f6a-2eb1-4ea4-b43c-996bad9ae000