1. sessions
2. header.jsp
3. redirect to index.jsp after session timeout