This week's book giveaway is in the OCAJP 8 forum. We're giving away four copies of OCA Java SE 8 Programmer I Study Guide and have Edward Finegan & Robert Liguori on-line! See this thread for details.
Aside from that, I'll issue my standard warning that webapps that do their own login logic instead of using the pre-debugged logic available as part of the J2EE standard are almost always easily hackable. VERY easily hackable, in most cases.
An IDE is no substitute for an Intelligent Developer.