Months ago I sent a patch to jetty guys which fixes an issue I spotted related with the URL session tracking.
Basically the the origin of the problem was that Jetty didn't expect more than one parameter in the URI part reserved for the session identifier, even though there are several applications using this part for handling special parameters, and not only the session id.