I’ll start off explaining the big picture of what I’m trying to do: I’ve implemented a D2Storefront sales web page. You could Google that; it seems to be a good and very low cost store front that uses ...

ASP.NET sees the session cookie and loads the session (or doesn't, and starts a new one). This is why people recommend serving static, unauthenticated resources like images from a separate domain.

[Editor's note: Peter rewrote this article after a reader pointed out he over-engineered his original solution. ("What can I say: The code worked -- I just didn't need nearly as much code as I thought ...