docs: @Nonnull
    public static HttpSession safeRenewSession (@Nonnull final HttpServletRequest aHttpRequest)
    {
      ValueEnforcer.notNull (aHttpRequest, "HttpRequest");
  
      // Is there any existing session?
      final HttpSession aSession = aHttpRequest.getSession (false);
      if (aSession != null)
      {
        try
        {
          if (LOGGER.isDebugEnabled ())
            LOGGER.debug ("Invalidating session " + aSession.getId () + " for renewal");
          aSession.invalidate ();
        }
        catch (final IllegalStateException ex)
        {
          // session already invalidated
        }
      }
  
      // Create the new session
      return aHttpRequest.getSession (true);
    }