Thanks for the excellent article, I had one query though. What if I have a json api being used both in the browser and on mobile platforms. Since mobile wont have cookies so what can be done in such situations?