Page History

...

Please remember that a JSP page, even one that simply prints out “OK”, will create a session. This is by design and if you do not want it to create a session you need to explicitly indicate that in your JSP. For example:

  <%@ page session="false" %>

This is important in scenarios where you are doing load testing and using custom HTTP clients, because these clients may not be handling sessions correctly and thus end up creating a new session every time they access the page.

...

It is also possible to limit the number of active sessions by setting maxActiveSessions attribute on a Manager element, e.g.

<Context>
  <Manager maxActiveSessions="500" />
</Context>