In cookieless forms authentication what I am told is the Ticket in the url is the same as the Session ID. Are they one in the same? ...