docs: public void dontStoreAuthenticationResultInHttpSession() {
          m_dontUseSession = true;
          final Timer timer = new Timer();
          timer.schedule(new TimerTask() {
              @Override
              public void run() {
                  m_dontUseSession = false;
                  timer.cancel();
              }
          }, TimeUnit.SECONDS.toMillis(MAX_SESSION_INACTIVITY_SECONDS));
      }