code: protected BasicAuthAuthenticator createBasicAuthenticator() throws RegistryException {
          SecurityService securityService = securityServiceRef.getService();
          UserRegistryService userRegistryService = securityService.getUserRegistryService();
          UserRegistry userRegistry = null;
          if (userRegistryService.isUserRegistryConfigured())
              userRegistry = userRegistryService.getUserRegistry();
          SSOCookieHelper sSOCookieHelper = webAppSecurityConfig.createSSOCookieHelper();
          return new BasicAuthAuthenticator(securityService.getAuthenticationService(), userRegistry, sSOCookieHelper, webAppSecurityConfig);
      }
docs: Create an instance of the BasicAuthAuthenticator.
  <p>
  Protected so it can be overridden in unit tests.