The https session repl code's implementation of TreeCacheListener should ignore events that occur outside its webapp's subtree. Currently it monitors the whole tree and ends up adding session id's from other webapps to its list of new session ids. This doesn't cause major harm but leads to wasted effort by the session expiration process trying to find non-existent nodes.