Support for non-cookie based sessions. Session is tied to require ip / authorization header and authentication scheme. This prevents multiple sessions being opened when all we have is an authorization header to authentication and no cookies.