jsps moved into WEB-INF
Login page  moved into WEB-INF