title: Spring mvc + security - session scoped beans
body: <p>I have a web application that uses spring-security. </p>
  
  <p>The spring security creates sessions for our users. Is it possible to tell spring security to store some reference in the session object for future lookup? If so is it possible to do using xml and/or annotations or do I need to extend some class or use one of the spring security "extension points"?</p>
  
  <p>If it is not possible by using spring-security what is the proper way to add some attribute to session?</p>