ASP.NET sees the session cookie and loads the session (or doesn't, and starts a new one). This is why people recommend serving static, unauthenticated resources like images from a separate domain.

With the advent of ASP.NET Core comes additional automated testing possibilities, such as the ability to write integration tests without needing to deploy the Web app to a Web server. The TestServer ...