diff --git a/src/main/java/com/gdsc/pikpet/config/security/SecurityConfig.java b/src/main/java/com/gdsc/pikpet/config/security/SecurityConfig.java
index 12b4b44..8e23532 100644
--- a/src/main/java/com/gdsc/pikpet/config/security/SecurityConfig.java
+++ b/src/main/java/com/gdsc/pikpet/config/security/SecurityConfig.java
@@ -44,7 +44,7 @@ public SecurityFilterChain securityFilterChain(
                                         .successHandler(
                                                 (request, response, authentication) -> {
                                                     response.setStatus(HttpServletResponse.SC_OK);
-                                                    response.setContentType("application/json");
+                                                    response.setHeader("Set-Cookie", "JSESSIONID=" + request.getSession().getId() + "; Path=/; HttpOnly");
                                                     response.getWriter().print("{\"success\": true, \"message\": \"Login successful.\", \"data\": {\"username\": \"" + authentication.getName() + "\"}}");
                                                     response.getWriter().flush();
                                                 }