I've run into a problem where I have a site that that requires user login, on this site they have the ability to pay for some widgets, so at the point of payment it switches to a secure site. However when it does it asks them to login again, I'm assuming this is because http and https will have separate session id's so it creates a new session. I thought about using a cookie, but I wasn't sure if I'd run into the same issue. Aside from posting the information to the HTTPS and restoring it is there anyway to do this?