It works. Even though we disable the cookies, the session ID will be embedded in the URL e.g. http://yourserver/folder/(session ID here)/default.aspx