docs: private void invalidateSession(HttpServletRequest req) {
          HttpSession session = req.getSession(false);
          if (session != null) {
              if (TraceComponent.isAnyTracingEnabled() && tc.isDebugEnabled())
                  Tr.debug(tc, "invalidating existing HTTP Session");
              session.invalidate();
          } else {
              if (TraceComponent.isAnyTracingEnabled() && tc.isDebugEnabled())
                  Tr.debug(tc, "Existing HTTP Session does not exist, nothing to invalidate");
          }
      }