I'm having the same problem. Getting the session token from a request made via browser, and using that token in my programmatic requests, does work, but that feels like cheating. What I really want to do is authenticate to Advent of Code programmatically via Github, but I haven't found a way to get my code to authenticate to Github itself; I keep getting redirects to github.com/login.