In some setups (not entirely sure what is exactly the criteria) you can end up with the Container#getSession()#getHttpSession().
I suspect it's a regression introduced by the refactoring needed for XCOMMONS-2963.
