in src/main/java/org/apache/sling/extensions/webconsolesecurityprovider/internal/SlingWebConsoleSecurityProvider2.java [103:105]
public User authenticate(String userName, String password) {
return null; // this method is never invoked
}