Basically By default all http request and responce are sateless means they considering every request as a new request so to identify a user we have to maintain state.