refactor auth.jsp page