Storing user credentials is one of the key roadblocks in creating a sessionless web application. Somehow you need to safely identify the user without storing