How are the sessions created and read in Tomcat Server?
The sessions are maintained in cookies. A session is initiated when ARC login page is opened. It remains active till the users log-out or the browser is closed. The user information is stored in the session. A web-server filter is used to check whether the same session is maintained for each request or not. The request is automatically routed to login page when the session is null or new, thus informing that the session is expired.