new jsp pages for session management