Secure JSPs from GETting them directly using stripes security JSP tag