protected void configureSessionHandler(SessionHandler sessionHandler) {
    sessionHandler.getSessionCookieConfig().setPath("/");

    // use AMBARISESSIONID instead of JSESSIONID to avoid conflicts with
    // other services (like HDFS) that run on the same context but a different
    // port
    sessionHandler.setSessionCookie("AMBARISESSIONID");

    sessionHandler.getSessionCookieConfig().setHttpOnly(true);
    if (configuration.getApiSSLAuthentication()) {
      sessionHandler.getSessionCookieConfig().setSecure(true);
    }

    configureMaxInactiveInterval(sessionHandler);
  }
Performs basic configuration of session handler with static values and values from
configuration file.

@param sessionHandler session handler
ambari-server/src/main/java/org/apache/ambari/server/controller/SessionHandlerConfigurer.java