procedure TForm2.Button1Click(Sender: TObject);
var
 Params : TStrings;
 lHTTP: TIdHTTP;
 IdSSL : TIdSSLIOHandlerSocketOpenSSL;
 N: Integer;
 Token,email,S: string;
 Reply: TStringList;
 Cookie: TIdCookie;
begin
  lHTTP := TIdHTTP.Create(nil);
try
  IdSSL := TIdSSLIOHandlerSocketOpenSSL.Create(lHTTP);
  IdSSL.SSLOptions.Method := sslvTLSv1;
  IdSSL.SSLOptions.Mode := sslmClient;
  lHTTP.IOHandler := IdSSL;
  lHTTP.ReadTimeout := 30000;
  lHTTP.HandleRedirects := True;
  lHTTP.Request.UserAgent := 'Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.76 Mobile Safari/537.36';
  lHTTP.Get('https://www.instagram.com', TStream(nil));
  Cookie := lHTTP.CookieManager.CookieCollection.Cookie['csrftoken', 'www.instagram.com'];
  if Cookie <> nil then
    Token := Cookie.Value;
    Finally

    end;

  try
   Params := TStringList.Create;
   Params.Add('username=' +'myusername');
   Params.Add('password=' + 'mypassword');

 NetHTTPClient1.CustomHeaders['X-CSRFToken'] := Token;
 NetHTTPClient1.CustomHeaders['X-Instagram-AJAX'] := '1';
 NetHTTPClient1.CustomHeaders['X-Requested-With'] := 'XMLHttpRequest';
 NetHTTPClient1.CustomHeaders['Referer'] := 'https://www.instagram.com/';
 Memo1.Lines.Add(NetHTTPRequest1.Post('https://www.instagram.com/accounts/login/ajax/', Params).StatusText);
finally
end;

end;