No, you don't need to extract session and cookies, this is only needed when you only need to use their API using its session and cookies, but this way can be detectable by them.
The best way is to use a chrome extension bot that behaviors like a real human