put this code in every page load event
if(session("loggedIn") != null)
//here put ur page load code
u have to put this code in all pages page_load event those pages u can only access after loging only...
coz some information need to removed from memory so that session expires will occur for 20 min defalut u can chage that in web.config file..