use Shum's testing login servlet