That's what I was thinking was the problem as well SD. However it wasn't that. The session path was set properly. It's just the primary one was totally ignoring it and storing in the default php directory while the captcha sessions were being written to the one specified in the config file.
No rhyme or reason why it was doing that, so had to change everything to use the default php one.
