Stateless authentication for Http Servlets