@Override
public Session newSession(final Request request, final Response response) {
final AuthenticationManager authenticationManager = anonymousAuthenticationManager();
final AnonymousWebSessionForIsis anonymousWebSession =
new AnonymousWebSessionForIsis(request, authenticationManager);
anonymousWebSession.authenticate(null, null);
return anonymousWebSession;
}