I am building an application which will be used by thousands of users simultaneously. So session handling is most important aspect. I don't want to use cookies or client variables.
You can use CF's 'session' scoped variables to do this and you can do it
without the use of cookies by doing the following:
<!--- Application.cfm --->
<cfapplication name="your_web_app"
sessionmanagement="Yes"
setclientcookies="No"
clientmanagement="Yes"
sessiontimeout="#CreateTimeSpan(0, 6, 0, 0)#" />
<!--- Any links get the #URLToken# appended to them --->
<cfoutput><a href="index.cfm?#URLToken#">home</a></cfoutput>
<!--- Any re-directs have the URLToken appended to them --->
<cflocation url="index.cfm" addtoken="Yes" />