ClassCharts returns two cookies on login:
- cc-session
- parent_session_credentials
Two bugs were fixed:
1. response.headers.get('set-cookie') only returns the first cookie
Fix: use getSetCookie() to get ALL Set-Cookie headers
2. authCookies was storing full Set-Cookie header values (with path,
HttpOnly, Secure attributes) which breaks the Cookie header
Fix: extract only name=value portion: h.split(';')[0].trim()
3. Cookie header join used ';' instead of '; ' (missing space)
Fix: use '; ' as per RFC 7230