Assuming you create a new hibernate session for each request-response cycle, you can combine a separate object into a new hibernation session, but I would completely avoid this approach.
HttpSession, . -, HttpSession, - , , . .
, , hibernate "Identity Map". , . , , , , . , . , , . , , (.. id, userId ..) , , "" , User . , . .
User HttpSession hibernate, IdentityMap, , "" - , , . , , . .
, , , :
http://docs.jboss.org/hibernate/core/3.3/reference/en/html/transactions.html