add method level access control
add access denied page, remember me check
fix web.xml db settings!!
add password encription (db changes)