...
Customer session is maintained using token and/or cookies headers. Token is specified using yc header, whereas cookie is specified by yc cookie. Note that token is given higher priority and is examined first. Each REST API call response contains both yc header and ycboth the header and the cookie. Third party applications must provide this token and/or cookie for every subsequent call to maintain customer session.
...