I'm no expert, but the way that I did it was to use SA to enable the session variables from the login page (Step 3 of the Wizzard if you open the SA Authenticate User Server Behaviour)
Then on the pages that I wanted to update this information, created a form with Data Assist and then changed the text field type from text to hidden.
There might be a better way though.....