If time permits, get session cookies working with the API

[lukeshafer]

Figured this out -- can use credentials. Not used at this time but we may enable it later.