how to guarantee session is always created in http?

[jwilcox98200]

Hi,

I need some advice. I need to make sure a session is created in http and not in https. My environment is spring mvc and spring security running on tomcat 7.