We call getLoginURL() in the configure() method, which in turn uses the current Request in the SiteBasedFormCredentialsProvider, which of course does not exist at startup time