Difference between header and cookie for type cfhttpparam

Question

I am working on a ColdFusion application that authenticates with SharePoint Online and pulls out some files using the SharePoint REST API, as described at http://paulryan.com.au/2014/spo-remote-authentication-rest/

When I try to get FormDigestValue by sending to _api / contextinfo, if I set the type cfhttpparamto cookie, I get a 403 ban, but if I pass cookies as a header, everything works, but I don’t understand why.

<cfhttpparam
    type="header"
    name="cookie"
    value="rtFa=#rtFa#;FedAuth=#FedAuth#"    
  />

Works but

<cfhttpparam
    type="cookie"
    name="rtFa"
    value="#rtFa#"    
/> 
<cfhttpparam
    type="cookie"
    name="FedAuth"
    value="#FedAuth#"    
/> 

Crash

Answer 1

, , , . , , header cookie cfhttpparam URL.

header, URL.

cookie URL.

, API , URL.

cfhttpparam.