I built a small ASP.NET application. It has a global.asax and sets some session variables on Session_Start(...).
What could prevent (all) session variables from not being set? Would a session time out do it? What if JavaScript turned off? What else can do it?