bugfix: loginPost url should respect frontend security setting

bugfix: loginPost url should respect frontend security setting