once I login via cy.session and if I want to do cy.request within the same domain, do I have to pass a token? or does the cy.session handles that for me