I can't see we user Default controller Login and SecurityCheck actions. From code below we use different controller for these calls.