It sounds to me like either framework could very easily be pressed into service ... maybe even something more low-level like CGI::Application would be enough in this case. But you really do need to begin by thoroughly mapping out the application itself. (Any database on Earth will have no problem at all with "millions of records," and "thousands of sessions" is also no problem especially if you use memcached to drive them.)