Update hazelcast-wm/src/main/java/com/hazelcast/web/WebFilter.java

Proposed fix for #204; validate underlying HttpSession in addition to local flag