But it's unnecessary since you already set the Flash cookie.
In case user deletes that flash cookie, but forgets to clean the http one!
Ah, I see now! Really tricky...
And also the convenience of having the user/session info in HTTP headers where all sorts of other code/frameworks expect it -- instead of only where Flash in-page objects can see it.