code: protected boolean jSecurityCheck(String pathInContext,
                                       HttpRequest request,
                                       HttpResponse response)
              throws IOException
      {
          if (getAuthenticator() instanceof FormAuthenticator &&
              pathInContext.endsWith(FormAuthenticator.__J_SECURITY_CHECK) &&
              getAuthenticator().authenticate(getRealm(),
                                                          pathInContext,
                                                          request,
                                                          response)==null)
              return false;
          return true;
      }
docs: /* ------------------------------------------------------------