Should be HttpServletRequest.authenticate(HttpServletResponse response), should not include argument HttpServletRequest