Why we need session
To track user information and steps etc
What are 2 possible problems of session when user bookmark a page
2. Session might recycle and use by another user
Which method expires session
session.invalidate()
What are HttpServeletResponse 2 methods for encoding
2. String encodeRedirectURL