public class ServletAuthenticationCallHandler
extends Object
implements HttpHandler

This is the final HttpHandler in the security chain, it's purpose is to act as a barrier at the end of the chain to ensure authenticate is called after the mechanisms have been associated with the context and the constraint checked. This handler uses the Servlet HttpServletResponse.sendError(int) method to make sure the correct error page is displayed.