Fix attack detection in LoginServlet