Dealing with sessions and cookies in general directly on the level of HTTP headers is cumbersome. We'll want something more convenient.
Cookies could use the following structure (in requests and responses):
"cookies": "foo": "xyz", "bar": [ "abc", "123" ],
Cookies specified explicitly for a request override cookies coming from a session (see T227885). Other than that, this task is independent from support from session contexts.