session redirects and invalidate. all jsps affected.