added a 10 min session timeout
controller acts depending on session,doGet on controller goes to welcome page if you are logged in else login page