Shared fields like the database connection details will be stored in a new class WebgoatContext. For the moment, we create this object anew each time, but we will eventually create it once, and pass it to the constructor of WebSession, to provide initial values for each user. git-svn-id: http://webgoat.googlecode.com/svn/trunk@137 4033779f-a91e-0410-96ef-6bf7bf53c507