authorization header vs cookie. There are any references about authorization header vs cookie in here. you can look below.