this makes no sense.

- if the user is anonymous, he'd go to HudsonAUthenticationEntryPoint, not here.
- even if there is some code path that comes here, there's no guarnatee that SecurityRealm in charge wants a login form.