Controller now logs user in on secondary authentication success.