title: Session would not retain values and always return null
body: <p>I have a website, its completely over HTTPS. Even if someone tries to access over HTTP he will be redirected to HTTPS. I am using forms authentication. Recently I changed a setting to make the site more secure and after that Session is not retaining values and is always returning null. The settings are,</p>
  
  <pre><code>&lt;httpCookies httpOnlyCookies="true" requireSSL="true"/&gt;
  &lt;sessionState cookieless="false"/&gt;
  </code></pre>
  
  <p>I have no idea on how to fix this issue. How do I fix this issue? Also, is my site vulnerable if I do not use this setting? consider that everything else is secure.</p>