Instead of HttpSession, SessionEnvironment should hold a reference to tu current HttpServletRequest, so it always uses the current HttpSession belonging to that request.
Instead of HttpSession, SessionEnvironment should hold a reference to tu current HttpServletRequest, so it always uses the current HttpSession belonging to that request.