Never invalidate http session

This is a quick fix for HTTP session timeout which will result in some
strange behavior in client devices.

THIS MUST BE REVOVED if client JS code is able to re-authenticate from
local storage after session timeout.

src/main/webapp/WEB-INF/web.xml

@@ -73,4 +73,8 @@
 		<error-code>500</error-code>
 		<location>/error/500.html</location>
 	</error-page>
-</web-app>
+
\ No newline at end of file
+	<session-config>
+		<session-timeout>0</session-timeout>
+	</session-config>
+</web-app>