Fix typo in login.jsp
Extract /token security into base class