You need to manage the multi-user session info in a Storable. I couldn't find a CGI::Session::Driver::Storable, but it should be easy enough to write interface routines between CGI::Session::Driver and Storable. The latter has advisory locking routines which will be needed when updating the storable in the multi-session scenario.