How to send a value as hidden variable in api call of headers along with token to aviod XSS , Domain or email spoofing using angular 13?

Question

const request= req.clone({
headers: req.headers
.set('Content-type', 'application/json')
.set('Access-Control-Allow-Origin', '*')
.set('Access-Control-Allow-Headers', 'Content-Type')
.set('Access-Control-Allow-Methods', 'GET,POST,OPTIONS,DELETE,PUT')
.set('Strict-Transport-Security', 'max-age=63072000')
.set('X-Frame-Options', 'DENY')
.set('Cache-Control', 'no-cache, no-store, must-revalidate')
.set('x-xss-protection', '1; mode=block')
.set('Pragma', 'no-cache')
.set('Authorization',authtoken)
.set('sessionId',sessionId)
});

Can you please explain how to send session id as hidden variable innthe above snippet of code?