How about IP-based session tracking? I've never tried it with Perl, but in ColdFusion you can store session variables in a database using the IP address as the primary key. It causes some minor problems with proxy servers, but it shouldn't cause a problem except in extreme circumstances. And if your beliefs don't permit cookies, well, you're limited in options, I would think.