login: fixed error causing an exception after logging in.

The issue was I left an undefined variable in the WebAuthenticationBroker.

Also, added a TODO list.