code: @Override
      public AuthenticationStatus redirect(String location) {
          try {
              response.sendRedirect(response.encodeURL(location));
              response.setStatus(HttpServletResponse.SC_FOUND);
          } catch (IOException e) {
              // TODO: Determine if this needs a serviceability message
          }
          return AuthenticationStatus.SEND_CONTINUE;
      }
docs: /*
  (non-Javadoc)
  
  @see javax.security.enterprise.authentication.mechanism.http.HttpMessageContext#redirect(java.lang.String)