I had a similar problem.
Ended up solving it by putting the session data into a form within the page and POSTing the form to the SSL protected page.
Once in the SSL page, reinsert the POSTed form data into the session.
I know it's a hack, but like I said, it worked for me!
HTH.