performing post login activities for the custom css is not needed since the css is only retrieved on the website and api methods are going to get called right after this
remove unused generic type
remove unused variable
move session related classes to subpackage
SecurityCheckProvider now depends on SessionHelper instead of the request
add logback config for tests