Closes #550 by editing security.xml to allow anonymous access to the login scripts with the new URL scheme.