How can I delete a temporary file associated with a user's session ID when he/she closes his/her browser?

You can't See my comments elsewhere in the thread. but you can run some code every minute or so that checks for sessions that are timed out. I think that with CGI::Session, the exact way to detect which sessions are timed out is dependent on the driver.