Generic handlers must implement the IReadOnlySessionState interface to access session variables. If you also need to write session variables, implement IRequiresSessionState.
i.e. somthing like:
public class MemberHandler:IHttpHandler,IRequiresSessionState