hide jsp's (move into WEB-INF), cleaned ControllerServlet, keep index.jsp viewable