[business] returns real user object after successful authentication.
[jsf] implements basic login feature.