create-session="never" · http://stackoverflow.com/questions/2504590/how-can-i-use-spring-security-without-sessions

With the introduction of the security schema in Spring Security 2, it became much easier to get a simple secured application up and running. In older versions, · http://blog.springsource.com/2010/03/06/behind-the-spring-security-namespace/

Use Java annotations to validate your Spring WebMVC form beans. · http://wheelersoftware.com/articles/spring-bean-validation-framework.html