d an <code>HttpAuthenticationMechanism</code> 
 was <em>not</em> used Jakarta EE servers are encouraged, but not required, to set <code>[last status]</code> 
 to the value returned by <code>ServerAuthModule#validateRequest</code> transformed as follows:
 
 <ul>
   <li> AuthStatus.SEND_CONTINUE to AuthenticationStatus.SEND_CONTINUE </li>
   <li> AuthStatus.SUCCESS to AuthenticationStatus.SUCCESS </li>
   <li> AuthStatus.SEND_FAILURE to AuthenticationStatus.SEND_FAILURE </li>
   <li> (all other outcomes) to A