code: private CmsObject initCmsObject(HttpServletRequest req, HttpServletResponse res) throws IOException, CmsException {
  
          return initCmsObject(req, res, true);
      }
docs: Handles the user authentification for each request sent to OpenCms.<p>
  
  User authentification is done in three steps:
  <ol>
  <li>Session authentification: OpenCms stores information of all authentificated
  users in an internal storage based on the users session.</li>
  <li>Authorization handler authentification: If the session authentification fails,
  the current configured authorization handler is called.</li>
  <li>Default user: When both authentification methods fail, the user is set to
  the default (Guest) user.</li>
  </ol>
  
  @param req the current http request
  @param res the current http response
  
  @return the initialized cms context
  
  @throws IOException if user authentication fails
  @throws CmsException in case something goes wrong