When using session handling is it okay security wise to just remember the user-name or should I check the password every time (ie can session id's be faked)?

Thanks,
 	Max