414833 HttpSessionListener.destroy must be invoked in reverse order

jetty-server/src/main/java/org/eclipse/jetty/server/session/AbstractSessionManager.java

@@ -797,8 +797,10 @@ public abstract class AbstractSessionManager extends AbstractLifeCycle implement
             if (invalidate && _sessionListeners!=null)
             {
                 HttpSessionEvent event=new HttpSessionEvent(session);      
-                for (HttpSessionListener listener : _sessionListeners)
-                    listener.sessionDestroyed(event);
+                for (int i = _sessionListeners.size()-1; i>=0; i--)
+                {
+                    _sessionListeners.get(i).sessionDestroyed(event);
+                }
             }
         }
     }