Basic Authentication
See this documentation
Cookie handling
tbd
Closing Session
The duration of a session can be set separately for the core service and for the gateway.
The header parameter "x-os-session-keep-alive" can be used to force the session for this request to be closed in both the gateway and the core service.