V$SESSION vs v$active_session_history

Hello,

Has anybody dealt with similar scenarium or maybe familiar with how to organize diagnostics for following problem:

1. Dealing with third party application on TOMCAT connecting to the database.

2. there is login process through TOMCAT where jsp script for every login cheks on the database for credetentials

    So that means:

    2.1 application is connecting to the default database account from which it checks for the userid and password that was entered through jsp script with select into some special tables ?

    2.2 if user id and password were in compliance with table data then login succeed and session is formed otherwise the session is interrupted