[AUTH] problem with security.xml and login