don't quote me on this, but i suspect it has to do with cookie settings. you'll notice in set cookie there's the option to send it via ssl if availabale... but no such option exists (to my knowledge) for cookies generated by sessions. that may be the barf.
or:
your session may die because you're crossing domains by moving to the virtual host that ssl is running on.
just a couple of guesses.