Session cookies are fine, it's only advertising and tracking cookies which are covered by the legislation.