AHA, you actually store only one. LoginServlet:28

And again we have not working functionality. I'm asking one last time: did you try it before putting for review?