A 'sessionid' token is required for logging in to the website and a 'crfstoken' token is used to prevent cross site request forgery. An 'alertDismissed' token is used to prevent certain alerts from re-appearing if they have been dismissed.