Fix for JBAS-2403 introduced a bug by assigning the result of a call to loadSession() to a local variable. loadSession() will return null if the session has been removed from the cache by another cluster node, resulting in an NPE later in the method.

The result from the call to loadSession does not need to be assigned to the variable. If the session exists in the cache, the loadSession call will update the local session object's state to match the cache. If it doesn't exist in the cache, the local session object will still be marked as invalid and will be expired on the local node, which is the correct behavior.