Asp.net handlers and IRequiresSessionState
This is a small one 
By default when you create a new asp.net handler (.ashx) it implements the interface IHttpHandler. If you want to access information about user and other things stored in session you need also to implement the IRequiresSessionState.
IRequiresSessionState specifies that the target HTTP handler requires read and write access to session-state values