You have violated a whole raft of JSF constraints and conventions, not to mention my own personal rule that unless you want your webapp to be hacked and pwned, you should never write login code at all (use the appserver's security system, instead).
I do not see a package name on your bean source code. You are referring to an instance of the bean using a name that begins with an upper-case letter (Classnames begin with upper-case, instance names begin with lower-case). And you are referring to transient JSF constructs in a context as though they had long-term existence (Note: the more references you make to javax.faces objects in your code, the more likely you're doing in wrong, except for model objects). Also you need to study on how backing bean action methods and navigation work.
Customer surveys are for companies who didn't pay proper attention to begin with.