adding authorize in index jsp
updating