Session Object:
HTTP is a stateless protocol. That is, the protocol does not have any features that can be used to maintain information about a user. Each page request made by the user is treated as a request from a new user. Once the web server sends the page to the client browser, it closes the connection. Therefore, session comes to overcome this limitation. When a new user request for a web page then server object checks the SessionId. If the user had valid SessionId then the user is treated as 'ACTIVE USER' otherwise server object created a Session object for the user.
The Session object is used to store information about a user. The information is retained for the duration of the user session. Variables stored in the Session object are not discarded when the user browses from one page to another, they only destroyed when the user abandons the session or the session time out.