protected Session doGetSession(Serializable sessionId) throws InvalidSessionException {
   // Ignore session id since there is no way to acquire a session based on an id in a servlet
   // container
   // (that is implementation agnostic)
   ServletRequest request = WebUtils.getRequiredServletRequest();
   ServletResponse response = WebUtils.getRequiredServletResponse();
   return getSession(request, response);
 }
 protected Session createSession(InetAddress originatingHost)
     throws HostUnauthorizedException, IllegalArgumentException {
   ServletRequest request = WebUtils.getRequiredServletRequest();
   HttpSession httpSession = ((HttpServletRequest) request).getSession();
   return createSession(httpSession, originatingHost);
 }