Our non-SPA users generally stick us in the head of their standard page template. We store a token in sessionStorage (so it's not trackable across tabs) that is sent over when the page is reloaded in order to keep track of sessions across navigations.

In theory they could use something like a session cookie to keep the server-side session intact when page navigation happens. I think I would prefer that over injecting something like Turbolinks or limiting this to SPAs.