Don't you like Cookies !

Once you get the access cookie, visit /check.php to claim your flag.