Note that subclasses that override the login method must set the loginOk var to TRUE if the login succeeds in order for the
commit phase to populate the Subject. This implementation sets loginOk to TRUE if the login() method returns TRUE, otherwise,
it sets loginOk to FALSE. Perform the authentication of username and password.