e> to <code>AuthenticationStatus.SUCCESS</code> </li>
   <li> <code>false</code> to <code>[last status]</code> (see below) </li>
   <li> <code>ServletException</code> or <code>IOException</code> to <code>AuthenticationStatus.SEND_FAILURE</code> </li>
 </ul>
 
 <p>
 When an <code>HttpAuthenticationMechanism</code> was used <code>[last status]</code> must be
 the value returned by <code>HttpAuthenticationMechanism#validateRequest</code>.
 
 <p>
 When a Jakarta Authentication ServerAuthModule (SAM) was used an