e>. Additionally this method is called
 in response to <code>HttpServletRequest.authenticate(HttpServletResponse)</code>
 
 <p>
 Note that by default this method is <strong>always</strong> called for every request, independent of whether
 the request is to a protected or non-protected resource, or whether a caller was successfully authenticated
 before within the same HTTP session or not.
 
 <p>
 A CDI/Interceptor spec interceptor can be used to prevent calls to this method if needed. 
 See <a href="AutoApp