protected token exchange URL (web.xml forces HTTPSfpr /login/*)
Merge branch 'master' of github.com:mathiask/mondayflicks