privatevoid setUserInSession(Account user) {
HttpSession session = getThreadLocalRequest().getSession();
session.setAttribute(USER_SESSION, user);
System.out.println(session.getId());
}

private Account getUserFromSession() {
HttpSession session = getThreadLocalRequest().getSession();
System.out.println(session.getId());
return (Account) session.getAttribute(USER_SESSION);
}

getThreadLocalRequest().getSession() is supposed to get a different session for every request thread. In other words, if two users are logged in, each one should have a different session id. This whole concept works well in “internet explorer” but not in firefox or chrome. In FF and Chrome, both request threads are having the same session, and so 2 users logged in to different accounts would share the same session id.

Any suggestion?
thanx in advance