After we’ve done Part 1 and Part 2 parts — we can set the httpOnly cookie with an auth token and read it back…