Communication between servlets and .jsp's go over request, not session

(/=) This makes more sense, as the values passed are only relevant to
the current request, not the whole session. The new practice also
avoids possible collisions between servlets.
The only attribute that needs to be conserved is the user.

(/=) Some minor changes to the UI