MyServletUser.java: Not used
JSP:Page directive Session=false to stop unnecessarily creating httpSessions
UserFilter.java:Causing too many unnecessary sessions to be created. Session only created after User logged in.
UserSessionAttributeListener.java,UserFilter.java:User entity stored in Session context instead of UserName String