Checking the Cookies
Before doing anything else, we visit the ShowCookies servlet.
We may see something like:
- In the first HTTP response after the session is created, the servlet both rewrites URLs, and sends a cookie to the browser.
- The same session ID appears in both places.