cleanup of UserAuthenticator and introduction of a simple index.jsp redirect.. yeah i know, JSP's, yuck