PLINK-415: AuthenticationFilter should not call identity.login() unless the request is a login attempt