getSession(true) or getSession(false)

"getSession(true)" or "getSession(false)", it is a very big problem for NXFFP.

When userA using the system, userA suddenly was changed userB with userB was online.

This is the big problem. App server's? or HttpSession's? or Code's? or the God?

 getSession(true) or getSession(false) maybe is the critical cause.

Thanks Dontiz!

HttpSession	getSession()           Returns the current session associated with this request, or if the request does not have a session, creates one.
HttpSession	getSession(boolean create)           Returns the current HttpSession associated with this request or, if necessary, creates a new session for the request.