- Store form handler nonces in the servlet session instead of system properties,
    to prevent cross-session interference