ACL JSP and servlet implemented