difficulties aquiring a token. Nothing returned except 200s.

Hi all;

I'm having issues simply getting a token. I have a Python (Requests 2.91) client but I check it with wireshark..
Request and response screen shots below.

Now it returns 200 but I don't get any token except response headers. This is puzzling to me. I've altered the headers to request json and tried it without headers, logging in prior to the csrv token request, /services/session/token, /services/session/token.json, (the images are not that URL but the result is the same) get & even post but there are no errors according to Services. You do get a session cookie though(!?!)

It seemed to me that it worked with earlier versions, but I'm sure that more likely it is a silly thing I've done which should be obvious.

Incidentally, the authentication also returns 200 but subsequent calls with the cookie show up as unauthenticated, at least according to services log.
All the request/response formats (json, xml etc) are enabled. I've tried exposing all node, etc etc.

I'm stumped and this should be easy-peasy. Any suggestions?