// access denied handler
final String ep = config.getInitParameter("errorPage");
if(ep == null) {
throw new Error("The init parameter 'errorPage' must be declared");
}
final AccessDeniedHandlerImpl impl = new AccessDeniedHandlerImpl();
impl.setErrorPage(ep);
wrapped.setAccessDeniedHandler(impl);
// authentication entry point
final String lfu = config.getInitParameter("loginFormUrl");
if(lfu == null) {