Custom login page created; allowed access in SecurityConfiguration