Hi ! Is this a bug ? The following code always return a valid pointer : HttpSession sess = request.getSession(false); Api doc says that I should get null if no valid session exist. I can't get the keepgenerated (true) to work, is that also a bug ? Regards Jan Swedin