Do you know if the session variable is being set correctly? The code that you have on the verify page should check to ensure that the recordset has a record, if so then the session variable should be set and the user redirected to your email password page.
Where on your verify page do you have this code? It should be after the code for the recordset. Also, what is the exact code that you have on this page? It should be updated from what you have posted to include your session variable name and the email password page you want to send the user to.