GEOS-5852 default filter chain does not create HTTP session even with session creation enabled
Security documentation enhancments