cflogin, cfpplication and remoting

[ev]

i have a cflogin block defined within a cfapplication tag in my application.cfm.  this is for my administration section, which will involve both html forms and flash apps with flash remoting.
now, im having some problems with flash remoting and im wondering where its stemming from so taking a step back...
my cfcs are defined in  a folder under that of my application.cfm
so if i log in through an html interface and then during the application session, i go to a page with an embedded .swf.  do i need to login again in this .swf and use setCredentials? or can i merely call the service and see what happens.
the problem really is that of whether the server knows if the .swf is running in a logged in session.  i know i can work around this with a flashvar, but that can be worked around too.  is there a simple way to transmit authentication from http to flash?  or is it impossible because flash is client side.  it would be much nicer if flash remoting wasnt remote, and rather, the server can tell if the .swf calling the CFC is running in on the server, and if so, what application session and what roles...

ev