I have gotten sign in and session management working via the before filer using cookies only, header session_key did not seem to work, needs more testing.