title: SSL Secure login but non secure resources, does this make sense?
body: <p>We have a website, which uses SSL for Login/Signup since we have a limitation on using SSL.
  so after login it goes to another non secure site and uses a radnom generated session token to identify user transactions.</p>
  
  <p>How secure is that? considering that if any sniffer caught the token while the actual user is browsing can use it for malicious actions.</p>
  
  <p>Any other ideas to secure user's session?</p>
  
  <p>Thanks in advance</p>