request.getSession TRUE