// If user not authenticated, check if container logged them in, or if
// there's an authentication cookie
if ( !session.isAuthenticated() )
{
// Create a callback handler
handler = new WebContainerCallbackHandler( m_engine, request );
// Execute the container login module, then (if that fails) the cookie auth module
Set<Principal> principals = authenticationMgr.doJAASLogin( WebContainerLoginModule.class, handler, options );
if ( principals.size() == 0 && authenticationMgr.allowsCookieAuthentication() )
{