fixed minor initialization race condition (http session mode not set yet)

git-svn-id: https://svn.apache.org/repos/asf/incubator/jsecurity/trunk@710999 13f79535-47bb-0310-9956-ffa450edef68
diff --git a/src/org/jsecurity/web/DefaultWebSecurityManager.java b/src/org/jsecurity/web/DefaultWebSecurityManager.java
index b482cc7..f6c0533 100644
--- a/src/org/jsecurity/web/DefaultWebSecurityManager.java
+++ b/src/org/jsecurity/web/DefaultWebSecurityManager.java
@@ -150,7 +150,7 @@
     }

 

     public boolean isHttpSessionMode() {

-        return this.sessionMode != null && this.sessionMode.equals(HTTP_SESSION_MODE);

+        return this.sessionMode == null || this.sessionMode.equals(HTTP_SESSION_MODE);

     }

 

     protected SessionManager newSessionManagerInstance() {