Well I've considered that but ran into a few stumbling blocks: My little app is a popup called from the larger CRM package. If I use something like session_id in my app, the ID value doesn't change when they close the popup and re-open it, because the browser with the CRM package in it is still open. If I track based off of session_ids it'll appear that staff are opening my app and leaving it open all day (which they should be doing) even if they only open it once and close it immediate (which is what they're doing and why Management want to monitor who's not complying).
Thanks for the reply though, I'll continue to hammer my head on the keyboard until something useful comes out. 😃