the problem seems to be that after i log in i set a session variable called userID and if that userID isnt defined you have to log in again but i am still using the site so why do I have to log in again after 45minutes? shouldnt it only log me out if i'm not using the site for 45 minutes or more?
the code you had didnt work so i used cfdump for the session and continually reloading the page the cfid/cftoken values dont change at all and i'm using firefox (27).