I was just having a similiar issue and this is the onSubmit I made up for the logon page
Code:
public ModelAndView onSubmit(HttpServletRequest request, HttpServletResponse response, Object command, BindException errors) throws Exception {
Logon logon = (Logon)command;
// Check password
User user = getArchive().loadUser(logon.getHandle());
if (user == null)
errors.rejectValue("handle", "logon.error.bad.handle");
else if (logon.getPassword().compareTo(user.getPassword()) != 0)
errors.rejectValue("password", "logon.error.bad.password");
if (errors.getErrorCount() != 0) {
return showForm(request, response, errors);
}
// Create login Cookie
javax.servlet.http.Cookie cookie = new javax.servlet.http.Cookie("handleMilage", user.getId().toString() );
cookie.setMaxAge(60*60*24*365);// sets age to one year
response.addCookie(cookie);// String handle = web.util.Cookies.getCookieValue(request.getCookies(), "handleMilage");
//
return new ModelAndView(getSuccessView(), "userId", user.getId());
}