invalidateSessionOnDestroy

When true (default), invalidate calls HttpSession.invalidate() after clearing the session-details attribute.