Added an authentication service method so that non-HTML based clients can authenticate more easily. I also moved the login action to an ajax call, and it's the outcome of that call that determines whether and error message is displayed in the new alert text panel, or the session ID is stuff into a cookie and the browser is forwarded to the second application page.