$_SESSION не сохраняется после запроса fetch

<< ? php
//file core.php
session_start();

if(isset($_POST['action'])) $action   = $_POST['action']; 

switch ($action) {
case 'profile':
  if (isset($_SESSION['authorization'])) {
    $action = 'prof';
    echo $action;
  } else {
    $action = 'login';
    echo $action;
  }
  break;
case 'login':
  $emailLogin = $_POST['email'];
  $passLogin = $_POST['epass'];
  $doLogin = new Login($emailLogin, $passLogin);
  try {
    $doLogin - > login();
    var_dump($_SESSION);
    // Если true
    echo true;
  } catch (Exception $e) {
    echo $e - > getMessage();
  }
  break;
    
    

    //file Login.php
class Login extends Connect {
  public

  function login($email, $pass) {
    $conn = parent::conn();

    $userDB = $conn - > query("SELECT mail FROM users WHERE mail = '$email'");
    if ($userDB - > num_rows == 1) {
      $hash = $conn - > query("SELECT password FROM users WHERE mail = '$email'");
      $hash = $hash - > fetch_assoc();
      if (password_verify($pass, $hash['password'])) {
        $userId = $conn - > query("SELECT userId FROM users WHERE mail = '$email'");
        $userId = $userId - > fetch_assoc();
        $userName = $conn - > query("SELECT name FROM users WHERE mail = '$email'");
        $userName = $userName - > fetch_assoc();
        $_SESSION['userId'] = $userId['userId'];
        $_SESSION['userName'] = $userName['name'];
        $_SESSION['authorization'] = true;
        return true;
      } else throw new Exception('Неверный пароль');
    } else throw new Exception('Такой пользователь не найден');
  }
}

// здесь происходит вход на сайт, создаётся сессия
let loginPost = {
  'action': 'login',
  'email': email,
  'epass': epass
}
let bodyForLogin = new FormData();
for (let variable in loginPost) bodyForLogin.append(variable, loginPost[variable]);

fetch(phpPath, {
  method: 'post',
  mode: 'cors',
  credentials: 'include',
  body: bodyForLogin
}).then(response => {
  return response.text();
}).then(res => {
  console.log(res);
}
});

// здесь должно проверятся, есть ли сессия authorization
let profile = {
  'action': 'profile'
}
let bodyProfile = new FormData();
bodyProfile.append('action', profile['action']);

return fetch(phpPath, {
  method: 'post',
  mode: 'cors',
  credentials: 'include',
  body: bodyProfile
}).then(response => {
  return response.text();
}).then(res => {
  // но сессия пучему-то пустой массив
  console.log(res);
});