I know this looks like a very minor thing, but this was causing trouble for me in some integration tests, so I think I should bring it up here.

Wildfly appends JSESSIONID instead of jsessionid to the URL when encoding the session id (uppercase instead of lowercase). IMHO the spec requires it to be lowercase.

From Servlet 3.1 spec:

7.1.3 URL Rewriting

The session ID must be encoded as a path parameter in the URL string. The name of the parameter must be jsessionid. Here is an example of a URL containing encoded path information:

http://www.myserver.com/catalog/index.html;jsessionid=1234