<% If Session("username") = "" AND Session("password") = "" Then Response.Redirect "login.asp" End If %>