Type a Serializable class skeleton with serialVersionUID and transient

Answer

public class Session implements Serializable { private static final long serialVersionUID = 1L; private String userId; private transient String token; }

serialVersionUID pins the version so class changes do not silently break deserialisation. transient prevents token from being written to the stream.