Tomcat appends the jsessionid ( browser session I believe ) to the URL
Tomcat is not doing this automatically - somewhere in the application there is probably code that calls the method:
String HttpServletResponse.encodeURL(string)
(This is typically done to support browsers that have cookies turned off)
Bill