I’ll answer myself it seems that mechanize didn’t handle the cookie properly because I’m using entry on “hosts” for swagshop IP, and calling it by name, instead of calling it by IP. And then the redirection follows an IP so mechanize notice is not the same domain so it doesn’t send the cookie.
If I try the same, targeting by IP (instead of hostname), it seems to handle the cookies properly.