how to manage sessions in JSP. I want to create a session as soon as user logs in and disable the session when he logs out. I also want to disable back button so that when he presses back button login page has to be opened.