I'm using getSession(String id) to manage sessions. However unlike getSession(true), it doesn't refresh the session (i.e. it doesn't update the last-access timestamp). The result: After the specified session timeout period, the session is invalidated by the servlet engine, even though the user is still using the session. I need a way to update the last-access timestamp manually without resorting to using getSession(true). Please help me. -Thanks Nick.