The error message is quite clear and helpful. What don't you understand about what it is telling you? You might want to review the HttpSession API.