Ignored all the eclipse specific project settings.

Modified the LoginServlet to return the username from the first matching
user from the result set.
Now if exploited via an sql injection attack it will indicate which
username is in fact being matched against.