jsp with security/tags. without global variale "login"