If you don't want to use cookies to maintain state, then you can try storing a session identifier in a hidden form field in each page -- it is easily retreived. I think this was the approach taken in the days before Netscape introduced cookies. An alternative is url-encoded session keys (this is the Java approach when cookies are not enabled in the web client).
Good Luck!