I log in and then I am anonymous?
When using Services after login request in response You should get a X-CSRF-Token. You have to use it in header of next requests to keep "being logged in".
It should be in header for second (and all possible future) requests like:

headers: {
    "X-CSRF-Token":"XXXXXXXXXXXXXXXXXXXXXXXXXXXXX"
    "Content-Type":"application/json"
}