Gaikai, headed by David Perry, has taken a different road from OnLive, which uses a dedicated application in effect to open a remote session with a data centre and deliver access to entire games.
Because the script is being run in the context of the trusted web site, it has access to cookies such as session tokens, as well as any other user information available within the security context of that web site.