HttpSession: extracting data from http sessions