Sessionless Java Authentication