session param in xml servlet