Change to null pointer exception in httpsession