表单身份验证保护什么，而不是使用会话变量

I'm working on an application which uses the Session variable to keep track of users, checking on the master page for it's existence otherwise knocking them out to login. I wanted to change this over to Form Authentication as I read it was more secure and the data is encrypted.I'm working on an application which uses the Se