Print debug information to your log file (via warn for example) whenever you find an existing session and when you create a new session. Inspect the HTTP traffic to see whether the cookies get sent back and forth. Check whether your browser has stale cookies or block cookies.