you remove the session timeout=20
in login page, you set the
Session["utype"]=//you add type this code is add above of when you write response.redirect(orderform.aspx).
you also add the global.asax file and write smoething
void Session_Start(object sender, EventArgs e)
{
Session["utype"] = "";
}
I hope work.