docs: public boolean isRequestedSessionIdValid(HttpServletRequest _request, HttpSession sess)
    {
  
      SessionAffinityContext sac = getSessionAffinityContext(_request);
      String sessionId = sac.getRequestedSessionID();
  
      if ((sessionId != null) && (sess != null) && (!sess.isNew() || !_smc.checkSessionNewOnIsValidRequest()) && sessionId.equals(sess.getId()))
      {
        return true;
      }
      return false;
    }