Some clients should just be able to connect and do not require a session.
The server should be told a connection doesn't need a session. Then allow the connection without session creation.
The JavaScript client should be able to be configured for no sessions.