Fix loading index.
Turns out we /can/ live without .jsp, so do that. Improve bindings in auth filters.
Better coupling of many injected properties.
More shuffling.