updated loginService to use BroadleafRequestContext.getWebRequest()