Do I just put it at the top level with the LOGIN.ASPX page? And then put a button on the LOGIN.ASPX page that re-directs to this page - with them leaving the un/pw blank? Will that work?

Or does the session still timeout.