changeSessionId
Specifies that the Servlet container-provided session fixation protection should be used. When a session authenticates, the Servlet method HttpServletRequest.changeSessionId is called to change the session ID and retain all session attributes.