java servlet sessions

package login;
 
import java.io.*;
import java.sql.*;
import javax.servlet.*;
import javax.servlet.http.*;
 
public class LoginAuthentication extends HttpServlet{
 
  private ServletConfig config;
 
  public void init(ServletConfig config)
    throws ServletException{
     this.config=config;
     }
  public void doPost(HttpServletRequest request, HttpServletResponse response)
              throws ServletException,IOException{
 
    PrintWriter out = response.getWriter();
    String connectionURL = "jdbc:odbc:project";
    Connection connection=null;
    ResultSet rs;
    String userName=new String("");
    String passwrd=new String("");
    response.setContentType("text/html");
 
      try
			{
				// Load the database driver
				Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
				// Get a Connection to the database
				connection = DriverManager.getConnection(connectionURL, "", "");
				// Add the data into the database
				String sql =
				    "SELECT user,password FROM USER_INFO WHERE user='"
				    + request.getParameter("user") + "'" + "AND password='" + request.getParameter("pass") + "'";
 
                                Statement s = connection.createStatement();
				s = connection.createStatement();
				rs = s.executeQuery(sql);
                                HttpSession session = request.getSession(true);
 
                                while (rs.next())
				{
					userName = rs.getString("user");
					passwrd = rs.getString("password");
				}
 
				if(userName.equals(request.getParameter("user"))
			             && passwrd.equals(request.getParameter("pass")))
				{
//                                   session.setAttribute("username",name);
//                                    String string = response.encode
//                                    URL("NextPageAfterFirst.jsp?name=+name+&password=+password");
                                   response.sendRedirect("index.html");
 
                                }
			    else
			    {
			        out.println("Please enter correct username and password");
			        out.println("<a href='AuthenticLogin.jsp'><br>Login again</a>");
			    }
 
 
                                        rs.close();
					s.close();
			}
			catch (Exception e)
			{
				System.out.println("Exception is ;" + e);
			}
			finally
			{
				try
				{
					connection.close();
 
 
				}
				catch (SQLException ex)
				{
					System.out.println("Exception is ;" + ex);
				}
			}	}}

                                  

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84: