GLASSFISH-21219 Using HashMap instead of HashSet

- Session.hashCode may change