Hmm, in that case, is this your server or a hosted server? If it's your own, you'll want to take a look at the php.ini file and check to make sure the garbage collection area is set properly.
A site I worked on recently had this turned off in their php.ini for some reason so PHP was never clearing out the session files.
