Hello Ben,
Sling doesn't use http sessions - when you authenticate via your browser and later run some javascript code, the browser uses cached credentials and adds them to the http requests.Do you have any links that detail this, its not something I have heard of before.< insert embarrassed smiley here>
Read about REST, its kind of RPC done the HTTP way: eg. http://en.wikipedia.org/wiki/Representational_State_Transfer
-- peter
