create-session="never" · http://stackoverflow.com/questions/2504590/how-can-i-use-spring-security-without-sessions

With the introduction of the security schema in Spring Security 2, it became much easier to get a simple secured application up and running. In older versions, · http://blog.springsource.com/2010/03/06/behind-the-spring-security-namespace/