Made the login form processing be based on Spring Security.
A remaining security weakness is that the login form is still submitted
over http insted of over https.