An encrypted session manager for Tomcat