前端angularjs，服务端SSM框架，登录的时候$http.post连续请求服务端两次，请大神们帮忙看看

router:
    .state('page.login', {
        url: '/login',
        title: 'Login',
        resolve: helper.resolveFor('oitozero.ngSweetAlert', 'icons', 'backstretch'),
        templateUrl: 'app/pages/login.html'
      })

html:
    .top-content.login-content.backstretch(ng-controller="LoginFormController as login")
        .inner-bg
            .container
                .row
                    .col-sm-8.col-sm-offset-2.text
                        h1 综合业务运营管理系统
                .row
                    .col-sm-6.col-sm-offset-3.form-box
                        .form-top
                            .form-top-left.mt
                                img(ng-src="app/img/company/logo.png", alt="{{app.name}}")
                            .form-top-right
                                .fa.fa-lock
                        .form-bottom
                            form.login-form.form-validate(role='form', ng-submit="login.login()", name='login.loginForm', novalidate='')
                                .form-group
                                    label.sr-only(for="form-username") Username
                                    input#form-username.form-username.form-control(type='email', name="operator_mail" placeholder='请输入用户名...', autocomplete="off", ng-model="login.account.optAccount", required='')
                                    span.text-danger(ng-show="login.loginForm.operator_mail.$dirty && login.loginForm.operator_mail.$error.required") 请输入用户名
                                    span.text-danger(ng-show="login.loginForm.operator_mail.$dirty && login.loginForm.operator_mail.$error.email") 用户名为邮箱
                                .form-group
                                    label.sr-only(for="form-password") Password
                                    input#form-password.form-password.form-control(type='password', name="operator_password" placeholder='请输入密码...', ng-model="login.account.optPassword", ng-minlength="6", required='')
                                    span.text-danger(ng-show="login.loginForm.operator_password.$dirty && login.loginForm.operator_password.$error.required") 请输入密码
                                    span.text-danger(ng-show="login.loginForm.operator_password.$dirty && login.loginForm.operator_password.$error.minlength") 密码最小长度为6
                                button.btn(type="submit") 登录
                                .alert.alert-danger.text-center(ng-show='login.authMsg') {{login.authMsg}}
                .row
                    .col-sm-6.col-sm-offset-3
                        .p-lg.text-center
                            span ©
                            span(ng-bind="app.year")
                            span  -
                            span(ng-bind="app.name")
                            br
                            span(ng-bind="app.description")

第一次请求的时候请求头里没有Request Payload