Added explanations why there's a lot of code commented. The reason is that we didn't get the filter working that well, which didn't make it very secure to try and get a Person object from the Session filter, since anyone can just write the link and get to any page without logging in.