Sonar: Bad practice - Store of non serializable object into HttpSession