working filter resolving to login.jsp if not logged in