JiaPei - Guess what? A String is an Object !! . So yes, you can put a String object in the session. Just remember that when you use session.getAttribute("yourParameter"), it'll always return an Object, so you'll have to typecast it to a String.
I'm not going to be a Rock Star. I'm going to be a LEGEND! --Freddie Mercury