authenticationScheme.handler.addConstraint(securityHandler, path)
        } else {
            realm = new TestUserRealm(username, password)
            securityHandler = authenticationScheme.handler.createSecurityHandler(path, realm)
            def shouldRestart = handlers.server?.isStarted() ?: false
            if (shouldRestart) {
                handlers.stop()
            }
            securityHandler.handler = handlers

                    return super.validateRequest(req, res, mandatory)
                }
            }
        }
    }

    abstract static class AuthSchemeHandler {
        ConstraintSecurityHandler createSecurityHandler(String path, TestUserRealm realm) {
            def constraintMapping = createConstraintMapping(path)
            def securityHandler = new ConstraintSecurityHandler()