//AllowStringAsBuildingBlock is set to NO in web.xml
SafeText userName = SafeText.from(aRequest.getUserPrincipal().getName());
fLogger.fine("Adding user preferences to session, for principal name:" + userName);
PreferencesDAO dao = new PreferencesDAO();
try {
Preferences prefs = dao.fetch(userName);
fLogger.fine("Adding user id and screen name to session");
aSession.setAttribute(ActionImpl.USER_ID, prefs.getUserId());
aSession.setAttribute(Preferences.SCREEN_NAME, prefs.getScreenName());
}
catch (DAOException ex){