Each web services invocation causes a new HTTP session to be created.

JBWS-816 added the ability to obtain the http session from the MessageContext, however the process of adding the session to the MessageContext causes a new session to be created even if it is not actually required. These sessions build up until they are timed out and cleaned up.

The session should only be created if it is actually requested instead of creating it for all requests.