sessions without session cookies

I got advice from Per Bøe and was able to adapt the approach in default iRule

_sys_APM_activesync

The trick was to

1. create a user_key from the basicauth header
2. On ACCESS_SESSION_STARTED, write the user_key to session.user.uuid:

   ACCESS::session data set "session.user.uuid" $user_key

3. On subsequent HTTP_REQUEST's, find matching sessions by

   ACCESS::user getsid $user_key

   and reuse them