Cookieless session handling.