logonStateMachine = new LogonStateAndCache(LogonStateAndCache.STATE_STARTED, request.getSession());
request.getSession().removeAttribute(Constants.AUTH_SESSION);
if(!Util.isNullOrTrimmedBlank(form.getUsername())) {
try {
User user = udb.getAccount(form.getUsername());
logonStateMachine.removeFromSpoofCache(user.getPrincipalName());
form.initUser();
try {
logonStateMachine.setUser(user);
}
catch(AccountLockedException ale) {