probably not this, but just double check...

Simple mistake that could result in session loss would be calling

$this->redirect(...);

instead of

return $this->redirect(...);

As Yii does not call die() or exit() in this method and the code on the lines following your redirect will be executed.