Sorry, i was a bit out. I did a check on FormsAuthentication.CookiesSupported and it says true (i logged it to a file) So i am a bit clueless here why this is happening. webconfig: <system.web> <sessionState timeout="60"/> </system.web> <system.web> <authentication mode="Forms"> <forms path="BackOffice" loginUrl="BackOffice/Default.aspx?state=Timeout" defaultUrl="BackOffice/Home.aspx" timeout="55" cookieless="UseCookies"> </forms> </authentication> <authorization> <!--<allow users="*"/>--> <deny users="?"/> </authorization> </system.web> The validation code: Protected Sub btnValidate_Click(ByVal sender As Object, ByVal e As EventArgs) Handles btnValidate.Click Dim dt As DataTable = db.GetData("SELECT Active FROM tblUsers WHERE Email = '" & tbxEmail.Text.Trim & "' and Password = '" & Replace(tbxPassword.Text, "'", "''") & "'") If (dt.Rows.Count = 0) Then ' This means that the combination of the email address and the password could not be found in the database lblLoginMessage.Text = CType(ViewState("vsAlerts"), Hashtable)("Alert1").ToString Else If (CType(dt.Rows(0)(0), Int32) = 0) Then ' This means that the user is not allowed to log in, the Active bit is set to 0 lblLoginMessage.Text = CType(ViewState("vsAlerts"), Hashtable)("Alert2").ToString Else Session.Add("User", tbxEmail.Text.Trim) Session.Add("Date", DateTime.Now.ToString) Session.Add("Active", 1) Common.LogInfo("FormsAuthentication.CookiesSupported: " & FormsAuthentication.CookiesSupported(), 3, Parameters.LOG_FILE, "clssDbAccess.SetData") FormsAuthentication.RedirectFromLoginPage(tbxEmail.Text.Trim, False) End If End If End Sub