docs: public HttpSessionImpl getSession(final String sessionId) {
          final SessionManager sessionManager = deployment.getSessionManager();
          Session session = sessionManager.getSession(sessionId);
          if (session != null) {
              return SecurityActions.forSession(session, this, false);
          }
          return null;
      }