If I have a site where there is a protected back end and I'm looking to use an application.cfm file, how can I tell which pages use the application filesa and which ones do not.

```
index.cfm
update/application.cfm
update/loginexpired.cfm
update/login.cfm
update/somesecurepage.cfm
update/someothersecurepage.cfm

```

I want `updates/login.cfm` to create the session if the login is correct.
If the secure pages `update/somesecurepage.cfm` and `update/someothersecurepage.cfm` are accessed without correct login the application should forward to `update/loginexpired.cfm` but I don't want any of the other pages to use `application.cfm`.

Is this plausible or should I use `cfinclude` instead?