Added filter that forwards to login.jsp if "user" is not set in session.