remove session config in web.xml because it's has a default value.