in reply to Set Cookie & Redirect from IFRAME

HTTP provides no mechanism for mucking about with frames. The only way to do this would be to redirect to a document that would be loaded into the iframe and from there use client side technology to change the frames.

Something along the lines of some JavaScript:

window.onload = function() { top.location = '/'; }

With a fallback to a regular link:

<p>Your session has timed out. Please <a href="/" target="_top">log in again</a>.</p>

Should do the trick. Or you could avoid using frames in the first place.