Download with Guestbook doesn't save guestbook response from SPA

[ekraffmiller]

When an anonymous SPA user downloads a file with a guestbook, the guestbook response is not saved. This occurs even though the API call to the dataverse contains the guestbook response.

However if you try the same thing in an incognito window, the guestbook response is saved. It seems that session cookies are saved when the user creates the guestbook within JSF, and those cookies are detected when the API is called.

What steps does it take to reproduce the issue?
From within JSF create a guestbook and assign it to a dataset, with a file. Publish the dataset.
From within SPA, click "Access File", to sign the guestbook and download the file. If you look at the signedUrl that is returned, it is missing gbrids in the Url. Also if you look at the database, the Guestbook response isn't saved.
If you try again from an incognito browser window, it succeeds, because the dataverse cookies aren't sent.

• When does this issue occur?
  From the SPA, after starting a JSF session

• Which page(s) does it occurs on?
  Download with Guestbook

• What happens?

• To whom does it occur (all users, curators, superusers)?

• What did you expect to happen?
  The guestbook response should always be saved, unless it is a DRAFT version.

Which version of Dataverse are you using?
Using version 6.10.1

Any related open or closed issues to this bug report?

Screenshots:

No matter the issue, screenshots are always welcome.

To add a screenshot, please use one of the following formats and/or methods described here:

• https://help.github.com/en/articles/file-attachments-on-issues-and-pull-requests

Are you thinking about creating a pull request for this issue?
Help is always welcome, is this bug something you or your organization plan to fix?