refact(login): use security and currentUser services directly in templates