Modifying SQL query to prent SQL injection 
Clean up old files 
replace Index.jsp with default.jsp
Point the first login page to the database listing the user