Move login/logout to own servlets