Cfpb,
I have two suggestions for you to try.
(1) Your problem might be caused by the session fixation issue. Pete Freitag describes this quite well in his blog, and gives you 3 possible workarounds.
(2) Use J2EE sessions instead (which you can configure in the ColdFusion Administrator).