<%@page session="false"%> Before creating session:
request.getRequestedSessionId = <%= request.getRequestedSessionId() %>
<% HttpSession session = request.getSession(); %> After creating session:
request.getRequestedSessionId = <%= request.getRequestedSessionId() %>
session.getId = <%= session.getId() %>
response.encodeURL = <%= response.encodeURL("foo.jsp") %>