Fix base controller login check; make js & stylesheets filenames configurable