Security in java web

I'm making a project Java web (without frameworks), I need that at press close session or logout, the session will be destroyed, and If I want try go at link whitout use the credential my software can't allow this and redirect at login page, I need help place, Idon't know how do this, sorry for my bad english ...