First, you should upgrade
and patch. Urgently and Importantly!
Then, the question is what you're going to do with this Listener.
Most likely there's an even better place to add your implementation,
e.g. a Lifecycle Action - e.g. one that's executed on every login
event, or others. Which one it is requires more knowledge about what
you're doing. I'd say that most likely a HttpSessionListener is often
too low-level for the general abstraction that you get with Liferay.
