Default authentication entry point should be FORM_AUTH