While I couldnβt directly influence the InAppBrowser headers or cookies, I was able to bypass the missing Tomcat JSESSIONID cookie by entering
;? JSESSIONID = sessionid.jvmroute
in the url. Remember that this operation opens a session identifier that would otherwise be secured by SSL / TLS.
source share