docs: @Override
      protected int authenticated(final Request request, final Response response)
      {
          try
          {
              final CookieSetting credentialsCookie = this.getCredentialsCookie(request, response);
              credentialsCookie.setValue(this.formatCredentials(request.getChallengeResponse()));
              credentialsCookie.setMaxAge(this.getMaxCookieAge());
          }
          catch(final GeneralSecurityException e)
          {
              this.log.error("Could not format credentials cookie", e);
          }
          
          // log.info("calling super.authenticated");
          // return super.authenticated(request, response);
          
          // Modified copy of Authenticator.authenticated
          if(this.log.isDebugEnabled())
          {
              this.log.debug("The authentication succeeded for the identifer \"{}\" using the {} scheme.", request
                      .getChallengeResponse().getIdentifier(), request.getChallengeResponse().getScheme());
          }
          
          // Update the client info accordingly
          if(request.getClientInfo() != null)
          {
              request.getClientInfo().setAuthenticated(true);
          }
          
          // Clear previous challenge requests
          response.getChallengeRequests().clear();
          
          // Add the roles for the authenticated subject
          if(this.getEnroler() != null)
          {
              this.getEnroler().enrole(request.getClientInfo());
          }
          
          // Return STOP here works for login but not for subsequent requests that expect a response
          // return STOP;
          return Filter.CONTINUE;
      }