docs: private WebReply unprotectedSpecialURI(WebRequest webRequest, String uriName, String methodName) {
          LoginConfiguration loginConfig = webRequest.getLoginConfig();
          if (loginConfig == null)
              return null;
  
          String authenticationMethod = loginConfig.getAuthenticationMethod();
          FormLoginConfiguration formLoginConfig = loginConfig.getFormLoginConfiguration();
          if (formLoginConfig == null || authenticationMethod == null)
              return null;
  
          String loginPage = formLoginConfig.getLoginPage();
          String errorPage = formLoginConfig.getErrorPage();
  
          // We check to see if we are either a FORM or CLIENT_CERT auth method.
          // These are the only valid auth methods supported (CLIENT_CERT can
          // fail over to FORM).
          if (isValidAuthMethodForFormLogin(authenticationMethod) && loginPage != null && errorPage != null) {
              if (TraceComponent.isAnyTracingEnabled() && tc.isDebugEnabled()) {
                  Tr.debug(tc, " We have a custom login or error page request, web app login URL:[" + loginPage
                               + "], errorPage URL:[" + errorPage + "], and the requested URI:[" + uriName + "]");
              }
              if (loginPage.equals(uriName) || errorPage.equals(uriName)) {
                  if (TraceComponent.isAnyTracingEnabled() && tc.isDebugEnabled())
                      Tr.debug(tc, "authorize, login or error page[" + uriName + "]  requested, permit: ", PERMIT_REPLY);
                  return PERMIT_REPLY;
              } else if ((uriName != null && uriName.equals("/j_security_check")) &&
                         (methodName != null && methodName.equals("POST"))) {
                  if (TraceComponent.isAnyTracingEnabled() && tc.isDebugEnabled())
                      Tr.debug(tc, "authorize, login or error page[" + uriName + "]  requested, permit: ", PERMIT_REPLY);
                  return PERMIT_REPLY;
              }
          } else {
              if (webRequest.getHttpServletRequest().getDispatcherType().equals(DispatcherType.ERROR)) {
                  if (TraceComponent.isAnyTracingEnabled() && tc.isDebugEnabled())
                      Tr.debug(tc, "authorize, error page[" + uriName + "]  requested, permit: ", PERMIT_REPLY);
                  return PERMIT_REPLY;
              }
          }
          return null;
      }