title: Classic ASP: ASPSessionID is reused
body: <p>I know how to handle this in ASP.NET, but is there a way to force the Classic ASP Session ID to be cleared?  It is a randomly generated ID like ASPSESSIONIDG32423E that does not seem to be available in RESPONSE.COOKIES collection thus I can not clear it.  We have a class ASP site still hanging around and recently it was an audit finding that after the user logs out the same session ID is reused.</p>
  
  <p>MORE CLARIFICATION:</p>
  
  <p>First visit to page, I see this in the proxy editor in Response:</p>
  
  <p>Set-Cookie: ASPSESSIONID=PUYQGHUMEAAJPUYL; path=/Webapp </p>
  
  <p>After a logout, I call Session.RemoveAll and Session.Abandon and then redirect user to login page. At which point I should see a new Set-Cookie with a different value for SessionID. Instead, I do not get a new cookie and the new login session reuses the original session cookie. This is an audit finding that we have to resolve in some way but there does not seem to be a way to control this.</p>