&& app.getLogin() instanceof FormLogin) {
RequestDispatcher disp = app.getNamedDispatcher("j_security_check");
if (disp == null)
throw new IllegalStateException(L.l("j_security_check is an undefined servlet"));
next = new ForwardFilterChain(disp);
}
if (constraints.size() > 0 || methodMap.size() > 0) {
SecurityFilterChain filterChain = new SecurityFilterChain(next);
filterChain.setWebApp(invocation.getWebApp());