// associating the request with the originating HttpServletRequest.
CreateRequest request = new CreateRequest(createRequest, getThreadLocalRequest());
CreateResponse response = null;
if (request.isTrackingEnabled())
logger.trace("Received by DMP servlet:\n" + request.toOIF());
try {
response = (CreateResponse) pluginManager.getSecurityManager().validateSession(request);
if (response == null){