[jboss-jira] [JBoss JIRA] (SECURITY-869) Session created if it doesn't exist even if authentication does not occur.