add a public jsp
fix a spring security bug and enhance jsp