First, you should upgrade and patch. Urgently and Importantly!

Then, the question is what you're going to do with this Listener. Most likely there's an even better place to add your implementation, e.g. a Lifecycle Action - e.g. one that's executed on every login event, or others. Which one it is requires more knowledge about what you're doing. I'd say that most likely a HttpSessionListener is often too low-level for the general abstraction that you get with Liferay.