Added Cart/UserAdminServlets. Refactored the login filtering to make it more flexible in configuration. Move filters to manager package. Split CurrentUserServlet from UserServlet to make permission checking more straight forward. Added todos and documentation.