To access a web API, the first step is to usually pass in your credentials and you get cookies back in the response that you need to propagate in your future web API requests to pass in the session at a minimum.
There are security limitations imposed on javascript to limit the visibility into 'set-cookie' within headers of web API responses.
What is the prescribed method within a Finesse gadget of moving cookies from the response header to the request header to make subsequent requests with the session and any other required cookies intact?
