Request should not have cookie header as calls are going to/api/*