code: private DbxSessionStore getSessionStore(final HttpServletRequest request) {
          // Select a spot in the session for DbxWebAuth to store the CSRF token.
          HttpSession session = request.getSession(true);
          String sessionKey = "dropbox-auth-csrf-token";
          return new DbxStandardSessionStore(session, sessionKey);
      }
docs: -------------------------------------------------------------------------------------------