title: Authentication without server session
body: <p>I like Wickets components and separation of HTML and code, but the stateful pages not so much. I am thinking of creating a Wicket app without server session state. I am not sure how to handle authenticated users, though. In other frameworks authentication can be handled by a signed cookie, which are validated on each request. Can this be achieved in Wicket? Or should I approach this differently?</p>