security intercept for index.jsp:userservice