WSO2 Publisher APIs
The response you've received for login call is the expected one. Here, a session cookie is saved in a file named cookies and it can be used in subsequent requests by giving -b cookies.
However, these are old APIs and will be deprecated soon. I recommend using new REST APIs.