Let me confirm one thing :
Did you replace
<jsp:useBean id="user" class="mypackage.User" scope="session"/>
by
1. <jsp:useBean id="user" class="mypackage.User" scope="request"/>
or by
2. <jsp:useBean id="user" class="mypackage.User" request="session"/>
You should be using number one.