Aug 15, 2017

Release the session when it is no longer needed.

Use the HttpSession.invalidate() to do this.