diff --git a/samples/tutorial/src/main/webapp/WEB-INF/applicationContext-security.xml b/samples/tutorial/src/main/webapp/WEB-INF/applicationContext-security.xml
index af2b4f07fd..6ba6a38631 100644
--- a/samples/tutorial/src/main/webapp/WEB-INF/applicationContext-security.xml
+++ b/samples/tutorial/src/main/webapp/WEB-INF/applicationContext-security.xml
@@ -30,7 +30,7 @@
           -->
         <intercept-url pattern="/**" access="permitAll" />
         <form-login />
-        <logout logout-success-url="/loggedout.jsp"/>
+        <logout logout-success-url="/loggedout.jsp" delete-cookies="JSESSIONID"/>
         <remember-me />
 <!--
     Uncomment to enable X509 client authentication support
diff --git a/samples/tutorial/src/main/webapp/index.jsp b/samples/tutorial/src/main/webapp/index.jsp
index 8c2e005bf9..09eedbb2e3 100644
--- a/samples/tutorial/src/main/webapp/index.jsp
+++ b/samples/tutorial/src/main/webapp/index.jsp
@@ -1,4 +1,5 @@
 <%@ taglib prefix="sec" uri="http://www.springframework.org/security/tags" %>
+<%@page session="false" %>
 <html>
 <body>
 <h1>Home Page</h1>
diff --git a/samples/tutorial/src/main/webapp/loggedout.jsp b/samples/tutorial/src/main/webapp/loggedout.jsp
index f7a8b7939d..2a45df9a31 100644
--- a/samples/tutorial/src/main/webapp/loggedout.jsp
+++ b/samples/tutorial/src/main/webapp/loggedout.jsp
@@ -1,14 +1,6 @@
 <%@page session="false" %>
 <%@taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core" %>
 
-
-<%
-    Cookie cookie = new Cookie("JSESSIONID", null);
-    cookie.setPath(request.getContextPath());
-    cookie.setMaxAge(0);
-    response.addCookie(cookie);
-%>
-
 <html>
 <head>
 <title>Logged Out</title>
