How to protect coding inside JSP?