Login servlet ended -> check TODOs

Signed-off-by: bplotka <bwplotka@gmail.com>