Upon a user’s first visit to the website， which two operations are always performed when the getSession method is called with no arguments in a servlet？（）

• A、 All URLs returned by the server are rewritten.
• B、 An HttpSession object is created if necessary.
• C、 The user name and password of the user are checked.
• D、 The session ID is stored in the HTTP response as a cookie.