title: Default session expiration timeout?
body: <p>By default the <code>JSESSIONID</code> cookie is expired when you close the browser, but how long is the associated <code>HttpSession</code> really valid on the server side?</p>