success.jsp with new css and doLogin with session updated for null user
and logout page with session invalidate