Call IdentityManager.verify() on the SSO account
Make the HttpContinueAcceptingHandler use a predicate instead of inheritence