I have a custom security principal object which I set in the global.asax for the current thread and all is well, no problems normally.
However, I\'m just adding a dy
Session has nothing to do with being logged in or not.
What event are you overriding when you want access to the session? Session isn't available until AcquireRequestState has been fired.
For more information, see: http://msdn.microsoft.com/en-us/library/9ysfzy8h.aspx