gistfile1.txt

protected void Session_Start(Object sender, EventArgs e)
    {
      Session["LoggedIn"] = false;
      if (!Context.Request.Path.Contains("CreateSession.aspx"))
      {
        Session.Abandon();
        Session.Clear();
        Context.Response.StatusCode = 401;
        Context.Response.StatusDescription = "Unauthorized";
        Context.Response.End();
      }
    }