Please call the processLogin-method of the authenticator only when a secured page is requested.
// check security constraint, if any if (match != null) { -> call here processLogin !
Log in to post a comment.