polishing HttpSessionFilter