Found the uaaController, hiding in login-common.xml, so it is defined by default.
Remove autologin controller, we no longer need it.
Consolidate the expiration time for both codes into one property