Implement only-cookies in backend