@fuxoft they make a request to an endpoint on google's servers, your browser attaches your session cookie to that request (because its going to google), who then serves up this response back to the browser.