I know that cookies are meant to only be read by one domain and one domain only however I am not to sure about sessions.
My understanding of sessions are that sessions vars are created by the serve so they would probably not be able to be read or interpreted by another server.
Maybe try including a security funciton from one server on to each page and have that server set and read the cookies for both sites?