delete servlet works, but refresh doesnt. fixed secure servlet