You could of course brute force the issue by installing a servlet filter that rewrites the Set-Cookie header when that cookie is set. I wouldn't, but you could. If people really want it to persist, a request can always be filed. -- Scott