[TECHNICAL-SUPPORT] LPS-37461 Unsuccessful login leaves user vulnerable to replay attack

Hi Julio,

Brian has already committed LPS-37461 to trunk last evening, however this morning when I backported my changes to 6.1.x I found two minor issues.

* Setting HTTP response code 302 is unnecessary, as MetaInfoCacheServletResponse does this automatically.
* I made a typo: response -> actionResponse.

Thanks,
Laszlo