web-app
implements HttpSessionListener;
public void sessionCreated(HttpSessionEvent se); // session begin
public void sessionDestroyed(HttpSessionEvent se) // session end
<listener>
<listener-class>ServletListener</listener-class>
</listener>
<session-config>
<session-timeout>1</session-timeout>
</session-config>