axios httponly cookie
server:
res.setHeader('Access-Control-Allow-Origin', 'http://localhost:3000');
res.setHeader('Access-Control-Allow-Credentials',true);
client(axios):
axios.defaults.withCredentials = true;
Disgusted Dugong