Configured Tomcat never to put jsessionid in URL.