add user session bean
add login filter
add LoginManager
role configuration