Stop entering the login/password in the Javascript application.
Redirect instead to the data server (ERP5), which will be able to set a correct cookie/token.

Authentication is done on a separate Web Site to bypass some cache bug on IOS.