goja-web/src/main/java/goja/security/goja/SecurityKit.java
private static <T extends Model> void setLoginMember(HttpServletRequest request,
                                                         HttpServletResponse response,
                                                         T user, boolean remember) {
        request.getSession().setAttribute(LOGIN_SESSION_KEY, user);
        request.getSession().setAttribute(LOGIN_MEMBER_ID, user.getNumber(StringPool.PK_COLUMN));
        saveMemberInCookie(user, remember, request, response);
    }
private static <T extends Model> void setLoginMember(HttpServletRequest request,
                                                         HttpServletResponse response,
                                                         T user, boolean remember) {
        request.getSession().setAttribute(LOGIN_SESSION_KEY, user);
        request.getSession().setAttribute(LOGIN_MEMBER_ID, user.getNumber(StringPool.PK_COLUMN));
        saveMemberInCookie(user, remember, request, response);
    }
Sign settings

@param request  request.
@param response response
@param user     The logged user.
@param remember is remember.