//test the case where the classloader is compatible
webAttributeQualifier = new DefaultWebAttributeQualifier();
session = createMock(HttpSession.class);
ValueHolder valueHolder = new ValueHolder();
expect(session.getAttribute("application_myapp_module_mymodule:myAttribute")).andReturn(valueHolder);
replay(session);
StateProtectingHttpSession wrappedSession = new StateProtectingHttpSession(session, webAttributeQualifier, applicationId, moduleName, ClassUtils.getDefaultClassLoader());