title: Custom session id generator for Tomcat 7/JBoss7
body: <p>Folks,</p>
  
  <p>My webapp needs URL-safe session ids. Those generated by JBoss 7 (embedded Tomcat 7 inside JBoss) have characters like "+" which cause us some heartache. One of the avenues I am exploring is the generate URL-safe session ids. Does someone know the correct hook point in a J2EE web application where I can plug in my custom session id generator?</p>
  
  <p>Ideally this hook point comes from the servlet API itself. If not,  am happy with a Tomcat/JBoss specific solution too.</p>
  
  <p>Thanks.</p>
  
  <p>-Raj</p>