title: Detect session timeout in Spring 3/Spring Security 2.0.5
body: <p>I have a web application running under Spring 3 with SpringSecurity 2.0.5.
  To present the user the changes to the site since his last visit, I try to register the time when his session is destroyed. Therefore I registered <code>org.springframework.context.ApplicationListener&lt;HttpSessionDestroyedEvent&gt;</code> and also a <code>javax.servlet.http.HttpSessionListener</code>. 
  The implemented methods work when the user uses the logout link. But when the session times out it's as if the events aren't generated.</p>
  
  <p>Am I forgetting to listen to the right events? Or is there nothing fired for the session timeout? Is there any other way to achieve this? Does it depend on a server setting (which is tomcat 6.0.24 btw)?</p>