You shouldn't use session to manage authentication. There are specific frameworks for that purpose already.
Each user will have a separate session. I don't understand what it is that you think you saw, where you saw it or what you expected to see instead.
Why are you using session mode = sqlserver? Are you hosting your application in a web farm?