Using Profile APIMaking a request to the Profile API should always send the Cookies, so the server will know the current logged in User.