We must override the login() method as it gives us access to the HttpServletRequest and HttpServletResponse,
which Crowd needs in order to generate and set the Crowd SSO token.
This method will allow you to remove all session information about the user and force them to re-authenticate
If you wish to remove specific application attributes for the user, e.g.