Server: CF2016 …. When we get multiple api requests within the same few seconds from the same source things gets garbled. Meaning, session, and possibly request data during the request is gets deleted somehow. There are no cookies sent with the request so CF should be treating each request as different. I feel like CF is merging requests somehow but not 100% sure. So, I guess my question.. is there a way to force CF to generate a new session for every request no matter what?

that... that's definitely not right. Are you behind some kind of load balancer or behind a caching engine or something else that could be messing things up?

I wish.. that would make this all easier

in terms of forcing a new session each time --- would putting a SessionInvalidate call in onRequest do it?

I have seen some pretty strange performance issues under load with sessioninvalidate

Have

this.sessionManagement = false

in Application.cfc? Sounds like yer not using sessions in the first place, so... switch 'em off?

Is the app using a framework of some sort that is trying to manage scopes through facades? (and getting it wrong due to a bug/race condition in the framework)