There is a nice thread about this here: Secure Session Management.
Ciao, Valerio
In reply to Re: Safely storing password by valdez in thread Safely storing password by sdyates