FORM is a system structure that's re-initialized on each page. Structures are passed "by reference" meaning you're just storing a pointer to FORM. So when FORM is reinitialized - so is your session variable.
The fix is to make a deep copy of the structure so it's not affected by changes to FORM. view sourceprint?
<cfset SESSION.reportForm = duplicate(FORM) />