Why are you afraid that session.isNew() might not work? It should, that is what it is intended for. :)
Also, your app does not need to worry about the JSESSIONID cookie, which is the container's responsibility.
[Message sent by forum member 'jluehe' (jluehe)]
http://forums.java.net/jive/thread.jspa?messageID=285242