replay(session);
StateProtectingHttpSession wrappedSession = new StateProtectingHttpSession(session, webAttributeQualifier, applicationId, moduleName, ClassUtils.getDefaultClassLoader());
assertTrue(wrappedSession.isValid());
wrappedSession.invalidate();
assertFalse(wrappedSession.isValid());
verify(session);
}