Yes, session cookies are excepted under Reg 6(4)(b). Most other cookies are capable of implicit consent.