sessionStorage API which gracefully degrades to window.name & cookies when not available