Lists security best practices and info on ColdFusion's session variable management and J2EE sessions.
Link: ColdFusion Session Management Tips from OWASP