<% session("valid")=request.form("password") if not (session("valid")="Lit" or session("valid")="lit") then response.redirect("login.htm") end if %>