 request or, if there is no current session and
 <code>create</code> is true, returns a new session.

 <p>
 If <code>create</code> is <code>false</code> and the request has no valid <code>HttpSession</code>, this method
 returns <code>null</code>.

 <p>
 To make sure the session is properly maintained, you must call this method before the response is committed. If the
 container is using cookies to maintain session integrity and is asked to create a new session when the response is
 committed, an IllegalSta