Invalidating the session in jsp