set the cookie in the response to their next request to you?

specifics depend upon the language and framework used on the server, etc...