There's no reason that should be true, that I know of. But I'd question instead whether the column var value is indeed exactly equal to the cfset var value.
I'll assume you've already done simple things like outputting the col value, whether cfdump, cfoutput, cflog or their script equivalents. If you might contend "I can't create output on this page", note how I offered also cflog, which wouldn't require seeing theo output on screen.
Even if the values may prove to "look" the same, your next step would be to compare the values. There are multiple ways to do that, whether the compare function or the various conditionals like IS, IS EQUAL TO, etc and operators like == and ===. More on those here.
Finally, about the "invalid client" error, do you belive that's coming from cf or from the destination auth server? Have you looked at all the cf logs, to see if any of them have more detail on the error? BTW, if on Windows don't rely on sorting the files by date/time modified in Windows Explorer: I've seen it frequently NOT reflect that a file had more recent modifications than the date/time shown.
Let us know what you find. Maybe others will have better answers or suggestions for you. And if this is business critical and a solution is not found via back and forth here, sometimes there's no substitute for having a shared desktop session together where seeing things may be far more effective. I can offer that on a consulting basis (carehart.org/consulting), but I'll also be happy to proceed here instead.