What can be done using the session object once it has been invalidated?
Govind Seshadri Once a session object has been invalidated, it is flagged for garbage collection and you no longer have access to it. You cannot ask the container to revalidate or refresh the session once it has been invalidated. Also, included JSP pages no longer have access to session-scoped objects. An invocation of request.getSession(true) within any page would result in the creation of a new session.