if (req == null)
throw new IllegalStateException(
"The ServletRequest cannot be null in getLogin()");
WebCallbackHandler webcallback = new WebCallbackHandler(req);
try{
LoginContext lcontext = new LoginContext("WebLogin",webcallback );
lcontext.login();
return true;
} catch (LoginException lge){
return false;
}