This week's book giveaway is in the OCPJP forum. We're giving away four copies of OCA/OCP Java SE 7 Programmer I & II Study Guide and have Kathy Sierra & Bert Bates on-line! See this thread for details.
JSF gives you the possibility to put your (managed) beans in different scopes, for example the session(-scope). Look at the <managed-bean> tag in the faces-config.xml. Further, I'don't think that JSF provides ways of dealing with the (content of your) session. Cause JSF is based on the Servlet API you should look into this Servlet API. You 'll find there the reqiuired interfaces (e.g. HTTPSession) and methods (e.q. request.getSession()) for dealing with the session.