I want to re-authenticate the user

The problem is not when the session ends, but when the user enters again to the system after his(her) session ended. The applications shows the login template, the user enter the user name and password and the application (I do not know how) authenticates the user and let him(her) to enter without running my: <cfset roles=session.security.login(cflogin.name,cflogin.password)>   Nor my: <cfloginuser name="#cflogin.name#" Password="#cflogin.password#" roles =#roles#"> And that is why I end up with a loged in user without my “session.userInfo” variable. I already try loging out the user in the onSessionEnd but it did not work either. My solution works but I want to know why is this happening, and why sometimes its authenticates and sometimes not. ----- Excess quoted text cut - see Original Post for more -----

Have you ticked the j2ee session variables checkbox in the cf administrator under memory variables. not sure if this will help it but i have had alot of problems with session variables if this is not ticked as the session remains active even if you close the browser. when this is ticked it deletes all session variables when the browser closes