https://exceptiondecoded.com/posts/spring-httpsessionrequiredexception/