full authentication and small servlet and jsp changes