LoginServlet + LogoutServlet works
bug fix in MainServlet
 merge