The DefaultAuthenticator class getUserFromBasicAuthentication method should be using setError instead of setStatus

According to jali in servlets versions >= 2.4 a user of setStatus is supposed to provide a context while setError does not. JIRA works around this issue by overriding the getUserFromBasicAuthentication method and calling setError instead of setStatus.