/**
  * Store the authentication information to the session.
  *
  * @param authInfo
  * @param user
  */
 protected void storeToSession(final AuthInfo authInfo, final User user) {
   if (logger.isDebugEnabled()) {
     logger.debug("storing to session: " + authInfo);
   }
   ContextUtils.setSessionAttribute(AUTH_INFO_ATTRIBUTE, authInfo);
   ContextUtils.setSessionAttribute(USER_ATTRIBUTE, user);
 }