maybe in the page load the session is still cached or something but after that point it gets wiped out and is kept in a place that zone alarm blocks..

just a guess, but hell why not..