If you set Forms Auth you get that automatically.
Session will always be defined...instead check for some value you set after login. Something like
In login.aspx AFTER success
Session["loggedIn"] = true;
In Page_Load wherever
if ((bool)Session["loggedIn"] == true)