You are correct that it should be Response, not Request, I mistyped
that. I can't fully test it right now, but I did see the behavior you
describe where a new session ID is issued with each request.
Nevertheless, forms authentication worked for me and it did seem to
maintain session variables, a...

[ more ]