Removed JSESSIONID tracking via web.xml