From the symptoms, sounds like you may have some request which is not releasing the session in a timely manner - I would suggest using failed request tracing to see what requests you are seeing with particular session-id and whether any of them are holding