in src/main/java/org/apache/sling/auth/form/impl/jaas/FormLoginModule.java [90:96]
public boolean commit() throws LoginException {
if (userId == null) {
// login attempt in this login module was not successful
clearState();
}
return false;
}