public boolean isRequestedSessionIdValid() {
        if (isHttpSessions()) {
            return super.isRequestedSessionIdValid();
        } else {
            Boolean value = (Boolean) getAttribute(REFERENCED_SESSION_ID_IS_VALID);
            return (value != null && value.equals(Boolean.TRUE));
        }
    }
Constructs and returns a {@link DisabledSessionException} with an appropriate message explaining why
session creation has been disabled.

@return a new DisabledSessionException with appropriate no creation message
@since 1.2
web/src/main/java/org/apache/shiro/web/servlet/ShiroHttpServletRequest.java