Update ControlServlet.java

Controller no longer extracts username and password before calling authenticator