title: Spring security handles session through JSESSIONID. But What happens with a AJAX requests, do they contain session information(i.e JSESSIONID)
body: <p>When using Spring Security: after a user is authenticated, subsequent request are validated using <code>JSESSIONID</code> header field(cookie field) by Spring Security filters.<br>
  So, on subsequent requests if I am submitting a <code>form</code> or making a resource request, the browser would automatically include the <code>JSESSIONID</code> and on the server side the <code>JSESSIONID</code> would be validated by the Spring Security filter and if every things fine then the <code>form</code> would be accepted or the request would be served. </p>
  
  <p>But after authentication, if the jsp or the front-end pages has a AJAX(or jQuery or dojo) request to be made to the server what would happen. <strong>What I am not sure is will the brower include the <code>JSESSIONID</code> header field even with AJAX request?</strong>  </p>