@Unauthenticated
    @Override
    public ConfirmPasswordResponse confirmPassword(final ConfirmPasswordRequest confirmPasswordRequest) {
        final HttpServletRequest request = httpServletRequestHolderProvider.get().get();
        final AuthenticationServiceImpl service = serviceProvider.get();
        return service.confirmPassword(request, confirmPasswordRequest);
    }
Called as part of logout flow when using internal identity provider.
stroom-security/stroom-security-identity/src/main/java/stroom/security/identity/authenticate/AuthenticationResourceImpl.java