moving the login function to the backing bean and away from the servlet due to session creation issues