Login modified (spring sec. clean)