new authentication servlet functional