Working with both SESSION and COOKIE scope tripped me up today so I wanted to illustrate what went wrong so hopefully others can avoid this.
This sets a session variable that will exist for the life of the session.
This sets a cookie that will exist for the life of the browser session.
This sets a cookie that will expire in 8 hours.
In my application.cfc I had set:
I had incorrectly thought that this timespan would also apply to the COOKIE scope, but it does not.