Web app - Include cookie in login-api/validate call