your client side scripts work because they get to reuse the session cookie that the NS browser client already has.