- enhanced Security domain model with Session and SessionAttribute
- created SessionDAO and initial unit test