title: For every new client tomcat is not creating new session id rather getSession() method giving old session id used by some other client
body: <p>Whenever client opens new web browser that client is treated as new client by the <strong>tomcat container</strong> and <strong>getSession(true)</strong> returns new session id for the client. </p>
  
  <p>If client opens <em>5 web browser</em> then <em>5 unique session id</em> is created by the container but in my case <strong>getSession(true)</strong> method returns old session id for every new client. </p>
  
  <p>For example if i call <code>getSession()</code> method for client one then container generate <code>B0B7945E63D00701E19FA6E9A4909B07</code> session id for client one, when second client come, i again call <code>getSession()</code> method but this time <code>getSession()</code> method return old session id which is generated for client one. </p>
  
  <p>So, the data which i set in session id for client one is reflected to client two also and if 5 or more client come then <code>getSession()</code> is returning old session id which is generated for client one to all clients.</p>