Creates an HttpSessionManager with the given attributeKey and default rotate / invalidate behavior (both true).
true