A request is received from a client for a web page hosted by a web server. Responsive to this request, a persistent client state object having an identifier therein is returned to the client. When a request is received from a client for elements of the web page hosted by the web server, the client is first required to return the persistent client state object having the identifier therein before the requested web page element is sent to the client.