It doesn't matter if a page is requested using a link or
form. It is merely the request that restarts the session timer.
Make sure you don't have multiple Application.cfc/.cfm pages
in subdirectories that may have different session timeout values.
Also, check for any code that may be removing
cfid/cftoken/jsessionid cookies, thereby, killing the
session.