<form-login login-page="/login" login-processing-url="/loginAction"
			username-parameter="username" password-parameter="password"
			authentication-failure-url="/login?error=1" default-target-url="/"
			always-use-default-target="false" />
		<logout invalidate-session="true" logout-success-url="/login"
			logout-url="/logout" delete-cookies="JSESSIONID" />