Reduce jsp functionality by user role, fix saving password insted of hash