This paper on browser fingerprinting shows that it is possible to identify a particular user, with reasonably high reliability, without using cookies or other tricks: https://panopticlick.eff.org/browser-uniqueness.pdf