rewrite AuthFilter
add FileDownloadServlet
and more pages