This code exemple is a very simplified exemple of my real code, it wasn't made to be manageable, only to be easier to paste
As for the session lock it was one of many attempt to fix the problem.
I will try your version.
Well no, no changes, i've reduced the timeouts to 20s since i don't wait to wait 20minutes for the session timeout and i know that even with 4h sessions
it also happens.
* You lgin, it's ok, you can redisplay (not re-POST) the logged-in page without trouble
* You let the session timeout
* You log-in again, it's ok
* You requery the application, well within the session timouet => you need to login again
* You log-in a second time and this time it's ok.
There has been changes in CF11 for handling "allowconcurrent" option, i may be mistaken but it look like that the sesion timeout and this code doesn't work together cleanly...