Fixes #757 - Add null pointer exception protection to the session fixation protection filter in case there is no active session on the request