if session("Password") = "" or session("EmailID") ="" then
response.redirect "Default.asp"
end if
you have an or between session("Password") = "" and session("EmailID") ="" which means that if either Password of EmailID is not set the it will redirect. What you need to do to not get into a loop is to when you redirect set Password and EmailID or redirect to a diffrent page.