Thanks Craig, so as can be seen @shubham, a cookie is in fact generated and part of the header payload.