session.invalidate is not working when the website is hosted to the live server. it is working fine while running in local server. we are using jboss3.2.7 server.