https://blog.f12.no/wp/2004/10/03/loginlogout-issues-with-jsp-and-servlets/