seems like BasicAuth and then using JSESSIONID in a cookie may work fine
p
seems like BasicAuth and then using JSESSIONID in a cookie may work fine