AuthFilter added, servlets cleaned up, login security fixed
starting ajax, authFilter complete