title: Jetty request.getSession(false) returning null, shouldn't be
body: <p>My server is running java 8 and jetty 9.1.3.v20140225.</p>
  
  <p>I have a straightforward servlet</p>
  
  <pre><code>@Override
  public void doGet(final HttpServletRequest request,
          final HttpServletResponse response) throws IOException,
          ServletException {
  
      // get the parameters
      String contactIdParam = request.getParameter("contact_id");
      String authToken = request.getParameter("auth_token");
  
      // do things...
  
      // set session attributes
      logger.info("Setting session attributes");
      HttpSession session = request.getSession(true);
      session.setAttribute("npoci", npoci);
  
      // move along
      final RequestDispatcher view = request
              .getRequestDispatcher("npo-portal.jsp");
      logger.info("time: " + session.getMaxInactiveInterval());
      view.forward(request, response);
  }
  </code></pre>
  
  <p>This takes me to my jsp.  The session timeout is 30 minutes.
  The jsp successfully uses the session variables, calls request.getSession(false) as I have heard is necessary, and posts a form back to that servlet.  The first thing in the servlet's doPost is</p>
  
  <pre><code>    // Check session not null, and get interactions
      HttpSession session = request.getSession(false);
      if (session == null) {
          logger.error("Session was null");
          response.sendError(HttpServletResponse.SC_FORBIDDEN);
          return;
      }
  </code></pre>
  
  <p>Invariably, the session is null.  I have tried this in both Chrome and Firefox, and verified that the cookie is actually still present in my browser.</p>
  
  <p>Any help appreciated.</p>
  
  <p>EDIT</p>
  
  <p>The servlet is now mapped to /npo-portal/update and does view.forward("npo-portal.jsp").  This has not fixed the problem.</p>