Change AbstractDispatchServiceServlet to require a session id if a SessionIdValidator is provided.