Is there any way to use Acegi / Spring security and authentication without the use of cookies? (ie: for mobile browsers and the like that don't always support cookies)