Also allow index.jsp as welcome file, and do not allow directory indexing.