title: Spring's SessionFixationProtectionStrategy kills CDI Conversation under JBoss / Weld
body: <p>I have an object that's marked as @ConversationScoped and is used between many steps of a wizard.</p>
  
  <p>This works perfectly except that when my user's are login in, the SessionFixationProtectionStrategy of Spring calls the session.invalidate() method to recreate a new session with a new id. It then goes and reattach the attributes of the invalidated session to the new one.</p>
  
  <p>The problem is that there's a WeldListener instance that is bound to the sessionDestroyed event and that will kill @ConversationScoped instances that are bound to the HttpSession object.</p>
  
  <p>I have disabled the SessionFixationProtectionStrategy and am now using NullAuthenticatedSessionStrategy which does nothing, but I would still like to keep the Session Fixation strategy to protect my site from this.</p>
  
  <p>Any suggestions on how to work around this? </p>