Sessions of non-authenticated users expire en masse

[Jeff 'Jones' Putz]

Here's some weirdness for you. I thought I'd be clever and track
user's sessions. Application_Sta rt creates a DataTable and dumps it in
the Application object. Then in Session_Start I put some stuff in it:

Application.Loc k();
DataTable objUserTable = (DataTable)Appl ication["UserTable"];
DataRow objRow = objUserTable.Ne wRow();
Guid objGuid = Guid.NewGuid();
objRow[0] = objGuid;
Session["PfSessionI D"] = objRow[0];
objRow[1] = 0;
objRow[2] = false;
objUserTable.Ro ws.Add(objRow);
Application["UserTable"] = objUserTable;
Application.UnL ock();

In Session_End I nuke the row:

Application.Loc k();
DataTable objUserTable = (DataTable)Appl ication["UserTable"];
objUserTable.Ro ws.Find((Guid)S ession["PfSessionI D"]).Delete();
Application["UserTable"] = objUserTable;
Application.UnL ock();

Because I want to know when it's a specific user who's on, I check
them out here in Application_OnA cquireRequestSt ate:

Application.Loc k();
if (Request.IsAuth enticated)
{
HttpContext context = HttpContext.Cur rent;
DataTable objUserTable = (DataTable)Appl ication["UserTable"];
People objPeople = new People(context. User.Identity.N ame);
foreach (DataRow Item in objUserTable.Se lect("SessionID = '" +
((Guid)Session["PfSessionI D"]).ToString() + "'"))
Item.Delete();
if (objPeople.Peop leID != 0)
{
foreach (DataRow Item in objUserTable.Se lect("PeopleID = " +
objPeople.Peopl eID.ToString()) )
Item.Delete();
}
DataRow objRow = objUserTable.Ne wRow();
objRow[0] = Session["PfSessionI D"];
objRow[1] = objPeople.Peopl eID;
objRow[2] = objPeople.ShowD etail;
objUserTable.Ro ws.Add(objRow);
Application["UserTable"] = objUserTable;
}
Application.UnL ock();

The People object has its PeopleID set to 0 if for some reason no user
record is found (from cache or DB), and that's the value given to any
request not authenticated.

Here's the weirdness though... the values in the table that have a 0
value in Row[1] (the PeopleID) all vaporize about every ten minutes
then slowly build back up to the number of non-authenticated users. I
can't for the life of me figure out why.