Best Practice 3 Do Not Create httpsessions in jsps by Default
HTTPSESSION objects are created in the default JSP file. This is primarily the default use of J2EE standard to use the use of the default object for the background, so you can use these objects in the JSP source and tags. HTTPSession objects make one of these objects. If you don't use the HttpSession object in the JSP file, you can save performance in the JSP file:
<% @ Page session = "false"%>