public void sessionDestroyed(final HttpSessionEvent event) {
final HttpSession session = event.getSession();
SessionAccess.removeSession(session);
final Context context = (Context) session.getAttribute(NOF_SESSION_ATTRIBUTE);
final AuthenticationSession nofSession = context.getSession();
if (nofSession != null) {
SessionAccess.logoffUser(nofSession);
}
}