What are you proposing to replace cookies with? Auth tokens and XHR? Localstorage? Why?