in src/main/java/org/apache/sling/auth/form/impl/FormLoginModulePlugin.java [137:140]
public AuthenticationPlugin getAuthentication(Principal principal, Credentials creds) { return authHandler::isValid; }