turn of session cookies the new way

Haven't tested this. more options can be found here:
https://stackoverflow.com/questions/5435494/rails-3-disabling-session-cookies

Not touching the session at all should also work as it is lazy loaded.