have u set the "authenticate"'s attribute before the page? if you haven't...then it is because the command : if getAttribute("authenticate")== null will always return null value, so it wil continuously direct you to the same page over and over again ( due to the response.sendredirect command
is it useful? hope it is good luck!
subject: Jsp pages executes twice for only one request?