<%= session.getAttribute("token") %> -> ${sessionScope.token}