write log-in data in session - JSF

FacesContext context = FacesContext.getCurrentInstance();
HttpSession session =
(HttpSession)context.getExternalContext().getSession(true);

session.setAttribute("username", user);
session.setAttribute("password", pass);