<bean id="dataSource" class="org.apache.commons.dbcp.BasicDataSource"
		destroy-method="close" p:driverClassName="org.h2.Driver" p:url="jdbc:h2:mem:sample"
		p:username="sa" p:password="" />

	<bean id="sessionFactory"
		class="org.springframework.orm.hibernate4.LocalSessionFactoryBean">
		<property name="dataSource" ref="dataSource" />
		<property name="packagesToScan">
			<value>
				com.epam.edu.jtc.entity
			</value>
		</property>
		<property name="hibernateProperties">
			<value>
				hibernate.dialect=org.hibernate.dialect.HSQLDialect
			</value>
		</property>
	</bean> 

@Repository
public class AuthorizationService {
 
	@Autowired
    private     SessionFactory sessionFactory; 
 
	@Transactional 
	public   List checkAuthorization(LoginDTOForm userV) {
		 
		//SessionFactory sf = HibernateUtilService.getSessionFactory();
		Session session = sessionFactory.getCurrentSession();
		 
		List userList = session
				.createQuery(
						"from User u where u.login='" + userV.getLoginField()
								+ "' and u.password='"
								+ userV.getPasswordField() + "'").list();

		session.close();
	 
		return userList; 

@Autowired
private SessionFactory sessionFactory;

Query query = session.createQuery("from User u where u.login=:1 and u.password=:2");
query.setParam("1", userV.getLoginField());
query.setParam("2", userV.getPasswordField());
List userList = query.list();