I have an HttpHandler that is run on a client page (cross domain, not on our IIS server, etc) and when they click on our embedded link it fires off the Handler on our server
try using the current context...
System.Web.HttpContext.Current.Session