Added 'Login controller' and simple logic to process login failure. Switched off method security.