code: protected void store(HttpServletRequest req, HttpServletResponse resp, String token) {
  		HttpSession session = req.getSession();
  		session.setAttribute(ATR_SESSION_TOKEN, token);
  	}
docs: Associates a token with an user.
  Default implementation stores the token into user session.
  @param req HTTP request
  @param resp HTTP response
  @param token token to be associated with an user.