A Harry, I have the same problem. I can NEVER get request.getSession(false) to EVER return a null. I am running Tomcat, so I am assuming that Tomcat must be creating the session automatically.
I would appreciate if anyone could expand on this.
Thanks,
Chughead