Session tracking by cookie can be disabled in the container:
http://wiki.eclipse.org/Jetty/Howto/SessionIds.
Scalatra does not create a session unless the session method is
called. Scalatra's flash map implementation does require a session.
I can't speak to how Bowler uses sessions.
I'm not an expert on Scalatra Auth, but its author can be found on the
scalatra-user mailing list or in #scalatra on Freenode.
--
Ross A. Baker
ba...@alumni.indiana.edu
Indianapolis, IN, USA