changed LoginControl to be session scoped and login mehtod