Admin key required. Add ?key=YOUR_ADMIN_KEY once, then it will be stored as an HttpOnly cookie.