auth refactor
LoginServlet refactor