In my application, I obtain the username and password. I then encrypt/encode the values and compare them against the encrypted database values. I am successfully able to retrieve the values from the database and load it into the respective VO objects.
Now, the problem is:
After Login user -> Instance of VO object
As I want to use "user" object in the application, I decrypt the database values, set the VO object with actual values and store them in session.
When I check the database, after user logs out, the decrypted values(in the VO Objects stored in the session) replace/updates the encrypted value in the database. I am not calling Save() method explicitly anywhere in the program.