Hi,
yes, you are right session retrieval from request object. But you have to read about variable scope. The request and session are two different scope.
Request scope basically use for particular request. while session scope available through out web application. so which variable set as session scope you can access any part of request and therefor you have to access session scope form request object.