When browsers don't support cookies, many sites rewrite the cookies into the URL. This exposes all such cookies in the GET request, allowing them to be cached and logged in many places. Disable URL rewriting unless your user community requires you to support this capability.