ADD jstl library, ADD HttpSession for login and invalidate after login