For session scoped form beans, when the session
times out, JSPs which attempt to retrieve form beans
held in session retrieve null instead. Causes
NullPointerExceptions. All actions should test for null
form beans and forward to login page (or something
appropriate) if the bean is null.