throw new RedirectToUrlException("/login/j_security_check?j_username=" + username + "&j_password=" + pass);