add Login to web.xml