No session will not work.if we set cookies session to true 
then it will work.

Sessions are normally tracked with cookies. However, 
clients are not required to accept cookies. Furthermore, 
you can turn off the use of cookies for session tracking 
altogether in the Web Application Server Control Panel. 
However when cookies are turned off or cookies are not 
enabled on a specific client computer, the server must work 
harder to track the session state, which has a performance 
impact. The recommendation is to leave cookies on and let 
the server automatically fall back to the cookieless 
operation only when required by a specific client 
connection.

When a session is created by the server, some information 
is automatically stored in it - the session ID and a 
timestamp. as an application developer, you can also store 
other information in the session in order to make it 
available to subsequent requests without explicitly passing 
it to that request.

if cookies is disabled in client browser than session will 
work by setting the property cookieless session="true"