* A fallback mechanism called in {@link #onFilterConfigSet()} to ensure that the
* {@link #getSecurityManager() securityManager} property has been set by configuration, and if not,
* creates one automatically.
*/
private void ensureSecurityManager() {
WebSecurityManager securityManager = getSecurityManager();
if (securityManager == null) {
log.info("No SecurityManager configured. Creating default.");
securityManager = createDefaultSecurityManager();
setSecurityManager(securityManager);
}