user filter to verify all the jsp page, remove the session verify in
servlet, change some jsp page to html, use index.html as first page