session.invalidate does not gets replicated

With the new implementation of http session replication using JBossCache, the session.invalidate was implemented to be expired only locally. It never gets replicated.

This was discovered during a load test by Clebert where a new session keeps created all the time and then invlidated. So if the invlidation is done only locally, the backup node will run out of memeory soon.