one more info: It looks like the error occurs just after the first session timeout after an applicationserver start.
The IE Script debugger shows an error on the login-page (login.jsp), even though were behind that point (current is kennzahlen_eingeben_details.jsf) ?? And the session-id attached at login.jsf is an orphan one!