int appid = this.getAppidFromTitle(appTitle);
if(appid == -1)
return -1;
ApplicationAcls appAcls = this.getApplicationAclsForUser(username, appid);
if(!appAcls.canHostApp())
throw new SecurityException("User " + username + " is not allowed to create sessions");
PreparedStatement stmt = null;
int sessionId = -1;