Remove glassfish licenses. Use volatile flag for session validity