Updated Servlet to verify using sessions

Cookies are not a secure way to persistanly verify a user;
Switched to sessions