de> or <code>IOException</code> to <code>AuthenticationStatus.SEND_FAILURE</code> </li>
 </ul>
 
 <p>
 When an <code>HttpAuthenticationMechanism</code> was used <code>[last status]</code> must be
 the value returned by <code>HttpAuthenticationMechanism#validateRequest</code>.
 
 <p>
 When a Jakarta Authentication ServerAuthModule (SAM) was used and an <code>HttpAuthenticationMechanism</code> 
 was <em>not</em> used Jakarta EE servers are encouraged, but not required, to set <code>[last status]</code> 
 to t