add jsp files and user authorization