A more detailed discussion about this design approach, as far as I can tell is to put all session information to URL automatically.

http://www-128.ibm.com/developerworks/java/library/j-cb03216/?ca=dgr-jw22StatelessWeb
http://www.theserverside.com/news/thread.tss?thread_id=39579#204688