The page directive's session attribute controls whether session is enabled in a JSP. E.g., the following turns session off:

<%@ page session="false" %>
By default it is "true", i.e., session is...