In one embodiment, a method includes receiving a HTTP request from a client device, the HTTP request initiating a user session. The method further includes dispatching the HTTP request to a selected application server of a set of application servers. In addition, the method includes servicing the request. Moreover, the method includes storing stateful information as at least one object in a central object store, wherein each of the at least one object is accessible via a lookup key. Also, the method includes generating a cookie. Further, the method includes encrypting into the cookie each lookup key for the at least one object. In addition, the method includes transmitting a response to the client device, the response comprising the cookie.