externalized login controller as a service