If you receive a session warning on your php login page, and have already sent a header, you will need to use php ob_start BEFORE you start the session
Warning: session_start() [function.session-start]: Cannot send session cache limiter - headers already sent
ob_start("ob_gzhandler");
session_start();