code: public Session session() {
          if (session == null || !validSession) {
              validSession(true);
              session = new Session(servletRequest.getSession(), this);
          }
          return session;
      }
docs: Returns the current session associated with this request,
  or if the request does not have a session, creates one.
  
  @return the session associated with this request