added jsp handlers so we no longer need all the html pages, and added spring security to CA (very poor implementation right now)