During programmatic AuthConfigProvider registration - especially
the AuthConfigProvider has no portable way to determine the name of the virtual
host, and thus to register using the same virtual host name that will be used
by the runtime in its call to
AuthConfigFactory.getConfigProvider(String layer, String appContextID,
Servlet 3.1 does not intend to provide a portable api by which the name of the
virtual host can be obtained.
this problem was first reported by Arjan Tijms