Sounds like a bad bug. cflocation should be adding ?jsessionID=whatever instead. Have you applied Updater 1? Do you get the same results with Updater 1?