I don't thing it's possible to have race condition in REQUEST scope. Setting APPLICATION or SESSION vars should be Exclusively-locked I think.