public HttpSession getSession(boolean create);
request.getSession(true)
request.getSession(false)
null