Mojarra's WebappLifecycleListener stores HttpSession references in an unindexed collection.  Since removal from this collection initiates from the session destroyed event, the HttpSession implementation passed to these events must implement hashCode/equals that is consistent with Undertow's HttpSessionImpl.

This otherwise causes a memory leak, as session will not be removed from this collection.