You can find a very similar question here: What is the use of ScopedValues beyond web authorization?.