UNDERTOW-80

 Do not remove session attributes before HttpSessionListener.sessionDestroyed() is invoked on all listeners