oracle 11g
application server: tomcat 7
apex 5.1
I have implemented two-way SSL configuration in tomcat
now I need to do token-based authentication so I have added a filter in "ORDS"(oracle rest data service) configuration files and add a java class and now I have my token attribute added to the tomcat sessions:

this is what i have in my tomcat manager, my token information are added to this session
but I need to access these attributes from my oracle database (java or pl/SQL) so I can do the authenticating with it. the "session.getattribute" doesn't seem to work there because all I have (sent via cookie) from tomcat session is just its "jsessionid"