fixed an auth session issue with jetty