webhandler and loginservlet changes in user exceptions and logic, not
finished yet.