added boolean injection
                    request.setAttribute(isLoggedIn, false)