A computer-implemented method comprising: by a computing system, receiving a first request from a client device associated with a user, the first request being directed to a first host associated with the computing system; by the computing system, generating a key in response to the first request; by the computing system, generating a verification token based on the key; by the computing system, generating an encrypted key based on the key; by the computing system, transmitting first instructions, the verification token, and the encrypted key to the client device from the first host associated with the computing system, the first instructions being configured to: cause the verification token to be stored as a first cookie on the client device, the first cookie being associated with the first host; cause the client device to transmit the encrypted key to a second host associated with the computing system; by the computing system, receiving a second request comprising the encrypted key from the client device; by the computing system, decrypting the received encrypted key to obtain the key upon determining that the encrypted key was not previously decrypted; and by the computing system, transmitting second instructions and the key obtained from the decryption to the client device from the second host, the second instructions being configured to cause the key obtained from the decryption to be stored as a second cookie on the client device, the second cook-ie being associated with the second host, wherein the first cookie is configured to be accessible by client-side scripts, wherein the second cookie configured to be inaccessible by client-side scripts. by a computing system, receiving a first request from a client device associated with a user, the first request being directed to a first host associated with the computing system; by the computing system, generating a key in response to the first request; by the computing system, generating a verification token based on the key; by the computing system, generating an encrypted key based on the key; by the computing system, transmitting first instructions, the verification token, and the encrypted key to the client device from the first host associated with the computing system, the first instructions being configured to: cause the verification token to be stored as a first cookie on the client device, the first cookie being associated with the first host; cause the client device to transmit the encrypted key to a second host associated with the computing system; by the computing system, receiving a second request comprising the encrypted key from the client device; by the computing system, decrypting the received encrypted key to obtain the key upon determining that the encrypted key was not previously decrypted; and by the computing system, transmitting second instructions and the key obtained from the decryption to the client device from the second host, the second instructions being configured to cause the key obtained from the decryption to be stored as a second cookie on the client device, the second cook-ie being associated with the second host, wherein the first cookie is configured to be accessible by client-side scripts, wherein the second cookie configured to be inaccessible by client-side scripts. cause the verification token to be stored as a first cookie on the client device, the first cookie being associated with the first host; cause the client device to transmit the encrypted key to a second host associated with the computing system; by the computing system, receiving a second request comprising the encrypted key from the client device; by the computing system, decrypting the received encrypted key to obtain the key upon determining that the encrypted key was not previously decrypted; and by the computing system, transmitting second instructions and the key obtained from the decryption to the client device from the second host, the second instructions being configured to cause the key obtained from the decryption to be stored as a second cookie on the client device, the second cook-ie being associated with the second host, wherein the first cookie is configured to be accessible by client-side scripts, wherein the second cookie configured to be inaccessible by client-side scripts.