Avoid unnecessary creation of DefaultEnvironment and access to the http session

Currently, the SessionListener accesses each request's http session to update the session usage data. In scenarios with a huge server load, this may not be the intended behaviour.

Also, an Environment eagerly accesses the http session, which might be obsolete in many cases.