Regex, SSL on session variables?

[mottwsc]

I create session variables upon a successful login for holding items between pages.  For example: username, preferences and authorization.

 

(1) When I read from those session variables on the following pages, should I use something like a regex to revalidate what I'm reading from the session variable, or is this overkill?

 

(2) If I use SSL on my site, does this eliminate the need to do this since it will better protect the session variables?

 

Thanks!