Add
protected void Application_PostAuthorizeRequest() { System.Web.HttpContext.Current.SetSessionStateBehavior(System.Web.SessionState.SessionStateBehavior.Required); }
to global.asax
Web Api 2 怎么支持 Session
原文：http://www.cnblogs.com/haoliansheng/p/4807141.html
