fixed LoginController and spring-security.xml