Security enhancement: check valid service list before accessing login service. This can avoid redirect to un-authorized third-party