added verify=true for all HTTPSESSION methods