We need to have more black box testing for http requests without replication. Every feature in single node should also be supported by the clustered session manager and session classes. But currently, our testsuite largely only covers the clustered aspects.

So here is two main steps:

1. Create an automated black box testing suite for http session request in a single node. We can use some tool to do this. Question is we need to define the tests.

2. Currently, Tomcat has a whole suite of unit testing on http session. We should look into that to see if we can re-use some of it in our own Tomcat module.