Fix a vulnerability in LoginServlet