Can a session token be generated in pure HTTP?

Authentication & Security
6

You can pass the api key and session token in the URL as parameters rather than headers.
ex:http://myurl/api/v2/db/_table/todo?api_key=myapikey&session_token=mysessiontoken