By default, Web Scripts are setup to use Basic Http Authentication - so, the recommendation is to place the ticket in the authorization header. Otherwise you can use the url argument alf_ticket, but there's no guarantee the ticket will be used in subsequent urls generated by the web script.