Manage session without cookies in a REST server