Pls also se threads. Looks to me like you might only have J2EE sessions enabled? I have some recollection that CFID/CFTOKEN aren't set if you have those switched on?

yes It was enabled on the Admin panel this has been turn off now