I am still a little confused what would happen if someone opened another browser tab(while logged in to the site correctly) and typed in a URL of a page behind the login page. Because I can't store cookies and there wouldn't be any session ID in the URL wouldn't the page look for authencication again? Wouldn't this annoy the user?
Again, sorry for sounding dumb but I've been looking at this for most of the day and my brain is about to leak out of my eye sockets!