add auth filter to prompt login page before pay
refactor codes
rewrite all servlets.
modify views. other fixes