add HttpServletRequest.authenticate() test