Fix a bug in HttpSession