else if (HttpServletRequest.DIGEST_AUTH.equalsIgnoreCase(authType))
_authType = HttpServletRequest.DIGEST_AUTH;
else if (HttpServletRequest.FORM_AUTH.equalsIgnoreCase(authType))
_authType = HttpServletRequest.FORM_AUTH;
else
throw new ConfigException(L.l("auth-type expects a 'value' of BASIC, CLIENT-CERT, DIGEST, FORM, or NONE"));
}