cleanup;  remove unused login check, login is already checked by spring security filter