Java中session存储Users对象实现记住密码

<form name="register" action="login.action" method="post">
	<div class="form_row">
		<label class="contact"><strong>Phone:</strong></label> 
		<input type="text" class="contact_input" name="uPhone" id="uPhone" value="${param.uPhone }" onblur="phoneBlur(this.value);"/>
		<span id="uPhoneMsg"></span>
	</div>
	<div class="form_row">
		<label class="contact"><strong>Pwd:</strong></label> 
		<input type="text" class="contact_input" name="uPwd" id="uPwd"/>
		<span id="uPwdMsg">${flag }</span>
	</div>
	<div class="form_row">
		<div class="terms">
			<input type="checkbox" name="rem" id="rem" checked="checked">记住密码
	<!-- <input type="checkbox" name="terms" id="terms"/> Rember me -->
		</div>
	</div>
	<div class="form_row">
		<input type="submit" class="register" value="login" />
	</div>
</form>

//5.1登录
@RequestMapping("login")
public String login(String uPhone,String uPwd,String rem,Model model,HttpServletResponse response,HttpServletRequest request){
	HttpSession session = request.getSession();
	String flag = "1";
	String uId = us.selectUsersByPhone_PwdService(uPhone, uPwd);
	//判断如果账号密码不存在 返回登录页面；存在，跳转到首页
	if(uId==null){
		flag="密码错误";
			request.setAttribute("flag", flag);
			return "register";
	}else{
		Users u1 = us.selectUsersByIdService(uId);
		//1.只要登录成功 就将users对象存入session中，为之后的过滤器使用
		session.setAttribute("handlerInterceptorSession", u1);
		
		//2.登录按钮按下后 当rem被选中，且密码正确时，将账号密码存入session
		if(rem.equals("on")){
			Users u2 = new Users(uPhone,uPwd);
			session.setAttribute("remSession", u2);
		}
		return "index";
	}
	
}

<script>
function phoneBlur(uPhone){
var phoneMsg = document.getElementById("uPhoneMsg");
	phoneMsg.innerText="";
	$.ajax({
		type:"post",
		url:"phoneExist.action",
		data:{"uPhone":uPhone},
		dataType:"text", 
		/* 当flag =0 提示用户不存在
			当flag = 1 普通用户
		 */
		success:function(flag){
			if(flag==0){
				phoneMsg.innerText = "请先注册";
			}
		}
	}) 
//5.当光标离开后调用记住密码的功能
remPwd(uPhone);
	
};

//5记住密码
/*1.当phone光标离开后 当rem被选中 从Remsession里面遍历，获取账号对应的密码。 */
//alert($("#rem").val());
function remPwd(uPhone){
	//每次进入 密码先清空
	$("#uPwd").val("");
	var remVal = $("#rem").val();
	if(remVal=="on"){
		//第一次登录会报异常，所以加""
		var sessionPhone= ${remSession.uPhone}+"";
		var sessionPwd= ${remSession.uPwd}+"";
		//当账号在session中可以查询到，就将session中的密码赋值给输入框pwd
		if(sessionPhone==uPhone){
			$("#uPwd").val(sessionPwd);
		}
	}
}
</script>