This can be good and bad. Good because some users turn cookies off so it allows session information to be used, but it also means that someone can copy the users url, with session id, and view what they were doing on the site. I had some links about the pro's and conn's will try and dig them out for you.