changed scope of LoginBean, added login-filter to web.xml, added some logging