CAS-1371: Turning on session=true at the JSP layer

Fixed a bug where requiring to create sessions at the JSP layer gums up the next login attempt from that browser session within the servlet session duration.