>How about a cookieless session over https ?

It is under https.

>Wish the SecureSessionModule here http://msdn.microsoft.com/en-gb/magazine/cc300500.aspx was more readable - can't work out what it is doing.....

Yes, someone definitely forgot that there is a carriage return in this world.