I just discovered a fantastic
blog post mentionning that Coldfusion (& Railo) have a java object that keeps track of sessions (that you can instantiate).. no more trying to count active sessions.
<cfset sessionTracker = createObject("java","coldfusion.runtime.SessionTracker")>
<cfdump var="#sessionTracker#">