Data could be stored in session via setSessionAttr(key, value), retrieved via getSessionAttr(key). Besides, you can get session object via getSession(), thus using complete session API.
session
setSessionAttr(key, value)
getSessionAttr(key)
getSession()