Added login controller to always allowed list.