SEC-1927: Corrected debug log in SessionManagementFilter to have a space between ID and the session and added guard to log statement

web/src/main/java/org/springframework/security/web/session/SessionManagementFilter.java

@@ -88,7 +88,9 @@ public class SessionManagementFilter extends GenericFilterBean {
             } else {
              // No security context or authentication present. Check for a session timeout
                 if (request.getRequestedSessionId() != null && !request.isRequestedSessionIdValid()) {
-                    logger.debug("Requested session ID" + request.getRequestedSessionId() + " is invalid.");
+                    if(logger.isDebugEnabled()) {
+                        logger.debug("Requested session ID " + request.getRequestedSessionId() + " is invalid.");
+                    }
 
                     if (invalidSessionStrategy != null) {
                         invalidSessionStrategy.onInvalidSessionDetected(request, response);