you shouldnt really be storing a password in a cookie.
and like i said, any page that you need to know the session of (ie you start a session on one page, and then three pages later you want to know what session it is) you can just call session_id() and it will tell you the session id. so you dont actually need to store it anywhere - it's stored on the server (hence the whole point of a session)