title: Remove JSESSIONID cookie from Spring Application
body: <p>I have a stateless Spring application, so I have no use for sessions. I would like to disable everything that has to do with sessions. I have a context.xml Tomcat config, where I have added this:</p>
  
  <pre><code>&lt;Manager pathname="" /&gt;
  </code></pre>
  
  <p>Source^: <a href="http://tomcat.apache.org/tomcat-6.0-doc/config/manager.html" rel="nofollow noreferrer">http://tomcat.apache.org/tomcat-6.0-doc/config/manager.html</a></p>
  
  <p>I have also added this to every http block in my spring security xml file:</p>
  
  <pre><code>create-session="stateless" disable-url-rewriting="true"
  </code></pre>
  
  <p>Even with these things done, if I manually delete my JSESSIONID cookie, any page I hit will add it again. How do I prevent this?</p>