filter jsp one user can view