public void login() {
            if (isLoginFailure()) {
                loginFailed();
            } else if (!redirectIfLoggedIn()) {
                throw new IllegalStateException("Not enough context to log in, need username / password");
            }
        }
let Shiro filter handle the login,
this method should only get called if login fails
login wait time is handled by Shiro configuration
support/jakarta-ee/src/main/java/org/apache/shiro/ee/filters/Forms.java