Session Credentials challenges the user by redirecting to a login form. We only have to override the methods that take care of extracting the credentials and .