Follow-up to r1726198 This rather critical change was hiding in a later commit that removed the deprecate code.
tomcat/tc8.0.x/trunk/java/org/apache/catalina/session/ManagerBase.java