title: request.getSession(false) not returning null after calling session.invalidate()
body: <p>Shouldn't invalidating a session cause <code>request.getSession(false)</code> to return null? In my logout servlet I call </p>
  
  <pre><code>session.invalidate();
  </code></pre>
  
  <p>and in my login status filter I call</p>
  
  <pre><code>request.getSession(false);
  </code></pre>
  
  <p>The call to getSession(false) never returns null but all attributes associated with the session object returned are null. I currently detect if a user is logged out by searching for null attributes but this doesn't seem right.</p>